fix: grant access when no groups specified