Adding users to groups and granting group members access to an object