This depends on the desired level of specification BDD. In any case you have a clear error situation e.g. "unauthorized creating a content type group". If the BDD does not specify the exact error messages it is up to the test implementation to check for the correct error message in the different interfaces - which is passable. Otherwise we would have to make special BDD specs for the different interfaces.