- Move access to it's own table.
- Refactor what department membership means in relation to group access