access manager, group manager