To prevent the creation of the Group Admin Role and related ACIs every time a group is created, do the following in the Access Manager Console:
Choose the Admin Console Service from the Services Configuration tab.
Select Group Admin permission from the list of Dynamic Administrative role ACIs in the global configuration.
Delete this permission by clicking Remove.
Save the configuration change.
The roles and relates ACIs will no longer be created when a group is created.
None of the new groups will have this facility. The permission and role creation is deleted permanently.