Assign user permission over a specific group only?

Is there a way to assign a specific user (admin) permission only over a specific group? I.e. a user should have access only to the group they need to manage, but should not be able to view and modify any other users outside the group (including the PAM root user).

Edit: I found out how to do it. Even though the groups do not appear in the dropdown unlike the other resource types (vms, storage, nodes, etc.), the full path to the group can be specified.