Added Group API to compute new group based on revoke and grant ops