* Add user group * Rename system group to plural
* Allow checking entity permissions based on devices * Fix tests
* Add read only and admin policies * Migrate to 2 system groups * Add system groups * Add system groups admin & read only * Dont' mutate parameters * Fix types