application specific behaviour like admin groups should be in application, not backend