Its possible but I forget how - just some tinkering with the permissions of users in the groups. I'll have a look and see....