Add PermissionGroup method to flatten the permission hierarchy