blocking shanghai province network
adding admin permissions for mossaic and hep groups (only on their VMs)