I can't speak for everyone but I almost always set mine up so that the secondary user groups are additive, so add an additional secondary that gives the privileges you want. As long as the other groups have it set to No and not never, a single additional group that has a Yes means the privilege...