assign permssions to groups