Working group based auth