Simple CUPS problem

Hi all,

I'm considerably inexperienced with CUPS, so I reckon this'll be an easy one.

I'm trying to allow OS users in the 'groupit' OS group the ability to reprint CUPS jobs from the web GUI (v1.6.3 on RHEL7).
However, they are being 'Forbidden' by CUPS.

My users are added to 'groupit', and in cupsd.conf, I have:

# Administrator user group...
SystemGroup lp sys root groupit
~~

Now, I understand "SystemGroup" translates to "@SYSTEM" in the printer/job policies (or maybe I've misunderstood that), so the following should allow my 'groupit' users to reprint jobs?

Require user @OWNER @SYSTEM
Order deny,allow

~~~

Would someone be so kind as to point out why my 'groupit' users are still being 'Forbidden' by the CUPS?

Thank you!

Elliot