Fixed groups migration; migrated schema; simplified app access policy after migration