all same comments as for PermissionGroupExternal.

BTW, could you please advise how these "external" and "internal" implementations will differ?