adding groups scope auth