Permissions for external usergroups

This fixes broken tests for the PR against theforeman/foreman