file access control
set primary group for user