create group and set permissions