Allow for custom-defined user group with per-group access control