well that’s annoying!
the first group didn’t work for one reason. I thought I had given enough time for the replacement group to propagate (I was able to use it to alter the category permissions) but you’re absolutely right. A reload and twenty minutes and it works.
Thank you @Moin