allow changing group that can log in to control center