There is one caveat.
If locale is another than EN automatic groups, as trustlevels etc, will use translated names. And those can’t be use. So if a tag group is allowed for TL3 then must create manually another group for TL3 (and higher).
This is longtime bug or design issue. Perhaps it will be fixed sometime.