change restricted group: 'Staff' -> 'Restricted'