Refactor group sync to pull access level logic to its own class

A continuation of !229 (merged); Fixes #398 (closed)

Pull access level logic to its own class to clean up the GroupSync class.

cc/ @jacobvosmaer FYI