How to give access to build and modify locations groups within a specific role?