Mattermost doesn't require role-management authorization when setting the scheme admin flag on group syncable link and patch endpoints in github.com/mattermost/mattermost-server