I believe it would be much more efficient to house touch-points under the Permission Group settings, where you could check/uncheck based on whether they would have access to each touch-point. As I recently created a new user group, I had to go through each t-p separately and check new boxes, which took a lot of time.
Guest
