added Groups management example

along with a permission helper