[admin] write privileges for group members