There's some inconsistency in the api here. Upon a first reading, I would interpret `give_access_user user group` to mean give user `user` acess to group `group`. However, this interpretation doesn't work for the following command: You're giving the group access to the network, not the other way around (which wouldn't make any sense).

This is confusing.