group and permission changeover