make admin groups work more