Group-Only ACL configuration is missing additional instructions

Hi there,
I was implementing the Group-Only based ACL, and I found the information lacking as it was still creating User and checking permission against it. So I have added the instruction to the documentation.
Hope this will be helpful for some newbie like me.