add permitted groups in .job description