Document Contacts permissions

We decided that contacts can be created only in a root group. We need to document this. Things not to forget:

• what will happen when the group structure is changed
• permissions (only users with Reporter+ role in the ROOT group can read contacts)