Differentiate ACL for groups and users