Separated checks for isMember and isSelf when authorizing group member actions
Started on cli for api calls, used for scheduled maintenance events