s3-samr-idl: add Group Object specific access rights.