setting up authorized groups