Create designs for user group and permission management

As we shift the front end to being more of an administrative interface we need designs (and user stories?)

These designs can then inform both what we implement in this repository but also what API endpoints are needed in `service`