Groups mostly work, as does filtering based on group membership