Simple resource and group-level access control.