Fixes #642 after #493, where Group Creators are given a `UserClassRole`,
but no permissions, so they end up with a "No Role" user role on the
front end. If Moderators end up being able to create classes, they won't
be able to view the groups they just created. The current system
succeeds because Group Creators are root admins.