Add group registration permission via migration