Adding Groups, Memberships, AccessRights + Service interfaces, DOs