Setup group affiliation authorizations