Allowed controllers to read/create groups.