Users are granted different access rights based on their group memberships