Roundcube group:owner

What is the proper group:owner permissions that roundcube should be set to? I have a dash of all different permissions in there after updating it.

I want to add rainloop to SENTORA as well. Will blow time on this in my own fork.