Groups is introducing stricter enforcement of internal/external classifications in Groups. As part of this, we are adding a suboption underneath the "allow external members" setting. This subsetting controls who can add external members. It can be set to all users or admins only.

We'd like to support setting that in GAM. The Groups settings API will support in sometime between now and May.