UserOrgTeamPermCond
this returns group ids where a user has permissions greater than or equal to `level`
GroupTeam
GroupUnit