AdminGroup configured as described here.