Introduce get permissions on the user group controller incl. tests