Improve permission exception handling in Group Management API