[SYNCOPE-1856] Administrator can update and delete realms outside of the granted subtree

[SYNCOPE-1856] Administrator can update and delete realms outside of the granted subtree #2902