managing rights adding by security group