Comment 8 for bug 18351

Yes, this needs to exist.

One benefit we have is that Debian uses usergroups, so groups of a particular user could be available just as a list, and then an 'Advanced' rollout that would be hidden by default (_unless_ the user's group is not of the same name) which would talk about primary group. This would seem very natural. If you still wanted to do the 'Permissions', that could be separate, and the group editing could hide those by default.

Still, one way or another it needs to happen. Very awkward to edit right now, *especially* because groups aren't even alphabetized.