Use User::getGroupsWithPermission