- Rules / Reports should be attached to Group - User who have access to Group should able do CRUD over Rule / Reports