assign_privileges(): assign to one group/stem at a time
Fix variable name