almost done with globalgroups permissions