https://userapps.support.sap.com/sap/support/knowledge/en/3744239
3744239 - Admins can create user groups with disallowed security domains after removing 'GROUP'...
Admins are able to create user groups for domain which they should not have access to; no validation error is shown The expected error: The security domain ID...
create user groups