filter groups with connected user permissions