`canManage` already returns the group. Can we not use that to avoid the additional queries?