https://0xjs.github.io/posts/Do-you-check-for-group-owners-of-privileged-roles/