When refusing access due to missing permission, also indicate which groups would have granted the required permission
When getting an error message line You don't have the right to view every dname object.
, it is unclear how to solve it based on the message.
We should consider indicating which groups would have granted the missing permission (for example something like You don't have the right to view every dname object. You need to be a member of GROUP1, GROUP2 or GROUP3 for this.
)