If you need to create policy rule in the Site context and want to grant permissions to members of a group, the group also must be defined in the Site context. To allow organization administrators to manage the group, assign it to a domain where organization administrators have permissions to view and edit the group. This would be useful if an organization administrator needed to modify a product team that was created using a team template. Since teams created from a team template require Modify permission at the site level, a group should be created at the site-level to manage these updates.