Why is the authzGroupService needed?