Policies Managed By for Group

Hello all,

Has anyone put in a policy to restrict a group from being used on the managed by for a group?

We have a certain set of groups that require to be managed by a user only.

Tried validation policy on the 'ManagedBy' must not be %<objectClass>group. I'm not sure I'm using this right.

Any help is appreciated.

Thank you, Lu