Access group entity reference requirement should be configurable

Problem/Motivation

The entity reference should not be required by default, and should be controlled by a setting so the user can choose to require that entity reference from the access group UI.