invitations have status, groups have privileges