I am curious why you are assigning permissions to users rather than groups (or at least it looks that way as the groups are non descriptive).

Also is sba1, sba2 and @sba1 all users or groups?