Support adding access to Google groups on team drives

[gdestuynder]

As in support setting regular google groups, such as "infosec@mozilla.com"
Right now you can set them but the IAM Robot will remove them.

I think there can be 2 ways to implement this so far:

1. simply ignore anything that's a group and not a user by looking up the group list, though there's a security trade off here, which is that a team drive manager can mess things up (but maybe thats ok)

2. have a list of groups which can be added in a setting file of some kind, or a storage service of some kind. it could even go in the group data itself in the CIS profile