Add the ability to restrict starting approvals to specific groups

Description

Requested by a customer: Possibility to define who can start approval (group).

This is currently only possible via the Permission scheme.