diff --git a/lib/db/access.php b/lib/db/access.php
index 3a7a3013050..22b34e4e1be 100644
--- a/lib/db/access.php
+++ b/lib/db/access.php
@@ -643,8 +643,6 @@ $moodle_capabilities = array(
 
     'moodle/course:managegroups' => array(
 
-        'riskbitmask' => RISK_XSS,
-
         'captype' => 'write',
         'contextlevel' => CONTEXT_COURSE,
         'legacy' => array(