Clarify 'can_create_group' in REST API dox
What does this MR do and why?
REST API documentation was ambiguous whether the can_create_group
setting on user
covered both top-level groups and subgroups or only top-level groups. This change clarifies it.