add support for modifying permissions maps in access groups