RT# 32234 Change unmask_ss from global conf to group access right