Move 'allowed' to noop group
Test successful 'allowed' case