The ID of the group allowed to deploy to this protected environment. The group must be a sub-group under the given group.