Set group 509 to AA-Only, will not work otherwise w/o a full VM license.