update user groups permissions