Ok I thought that by putting the optional_relation “member” in subject_reference would resolve the own permission on all members of a group, but I misunderstood. Thanks for the help