Moved the creation of permission groups into validator