No longer support global:permit.

Use general_permit instead.
Admins of owner are optional if extend_only is set
Description is valid in group.