helper types
integrity policy on groups