Add missing "connection group creation" permission.
System permission names should be compared with equals(), not startsWith().