can grant and revoke group acls to leagues