Add permissions on groups, we don't want users using some groups we setup. Some groups should be private for only global admin to use.