Group membership and decoration added to authorization