add ability to view/edit access groups of an agent