polishing usergroup and permissions ui