adding a group definition to officium for permissions