fix usage, add group perms