Yeah, capability for group permissions is a key part of the work happening on permissioned data in ATproto right now.

https://dholms.leaflet.pub/3meluqcwky22a

https://dholms.leaflet.pub/3mfrsbcn2gk2a

https://dholms.leaflet.pub/3mguviy6iks2a

https://dholms.leaflet.pub/3mhj6bcqats2o