* Idm app: refactoring group type usage (like role_admin) to privileges in idm + (simple) ui for managing them

* Privilege refactoring

* Privilege refactoring