Define model access with group capabilities