Incorrect permission check allows modification of RBAC configuration (BEE-392579
Now when using the items creation endpoint / CLI command an additional check is performed and if any of the defined objects includes groups a check for Group.MANAGE permissions will be done.