diff --git a/graphql/auth.ts b/graphql/auth.ts
index 9e175fb..f2ee382 100644
--- a/graphql/auth.ts
+++ b/graphql/auth.ts
@@ -80,6 +80,17 @@ export const groups: { readonly [authGroup: string]: AuthFilters } = {
     wastewatermpox: {
       where: ['Location', 'thisiddoesnotexist'],
     },
+  },
+  mb:{
+    sites:{
+      whereIn: ['siteID', ['THM, WPG-W, WPG-S, WPG-N, FLN, BDN']]
+    },
+    measures: {
+      whereIn: ['measure', ["covN2", "fluA", "fluB", "rsvA", "rsvB"]]
+    },
+    wastewatermpox: {
+      where: ['Location', 'thisiddoesnotexist'],
+    },
   }
 };
 
diff --git a/terraform/README.md b/terraform/README.md
index 731f1aa..89133a1 100644
--- a/terraform/README.md
+++ b/terraform/README.md
@@ -46,7 +46,7 @@ No modules.
 | <a name="input_api_name"></a> [api\_name](#input\_api\_name) | The name of the API Management API. Changing this forces a new resource to be created. | `string` | `"wastewater-graphql-api"` | no |
 | <a name="input_api_path"></a> [api\_path](#input\_api\_path) | The Path for this API Management API, which is a relative URL which uniquely identifies this API and all of its resource paths within the API Management Service. | `string` | `"wastewater"` | no |
 | <a name="input_apim"></a> [apim](#input\_apim) | APIM to create API in | `string` | n/a | yes |
-| <a name="input_auth_groups"></a> [auth\_groups](#input\_auth\_groups) | List of authorization groups, their display name, and their description. The value of `group` must match the groups defined in (auth.ts)(graphql/auth.ts) | <pre>list(object({<br>    group         = string<br>    name          = string<br>    description   = string<br>    subscriptions = number<br>    suspended     = list(number)<br>  }))</pre> | <pre>[<br>  {<br>    "description": "National Microbiology Laboratory",<br>    "group": "nml-lab",<br>    "name": "NML",<br>    "subscriptions": 15,<br>    "suspended": []<br>  },<br>  {<br>    "description": "Correctional Service Canada",<br>    "group": "csc",<br>    "name": "CSC",<br>    "subscriptions": 15,<br>    "suspended": []<br>  },<br>  {<br>    "description": "BC Centre for Disease Control",<br>    "group": "bccdc",<br>    "name": "BCCDC",<br>    "subscriptions": 15,<br>    "suspended": []<br>  },<br>  {<br>    "description": "Haines Junction (Yukon)",<br>    "group": "hnj",<br>    "name": "HNJ",<br>    "subscriptions": 15,<br>    "suspended": []<br>  },<br>  {<br>    "description": "Ontario Ministry of the Environment, Conservation and Parks",<br>    "group": "omecp",<br>    "name": "OMECP",<br>    "subscriptions": 15,<br>    "suspended": []<br>  },<br>  {<br>    "description": "Public Health Ontario",<br>    "group": "pho",<br>    "name": "PHO",<br>    "subscriptions": 15,<br>    "suspended": []<br>  }<br>]</pre> | no |
+| <a name="input_auth_groups"></a> [auth\_groups](#input\_auth\_groups) | List of authorization groups, their display name, and their description. The value of `group` must match the groups defined in (auth.ts)(graphql/auth.ts) | <pre>list(object({<br/>    group         = string<br/>    name          = string<br/>    description   = string<br/>    subscriptions = number<br/>    suspended     = list(number)<br/>  }))</pre> | <pre>[<br/>  {<br/>    "description": "National Microbiology Laboratory",<br/>    "group": "nml-lab",<br/>    "name": "NML",<br/>    "subscriptions": 15,<br/>    "suspended": []<br/>  },<br/>  {<br/>    "description": "Correctional Service Canada",<br/>    "group": "csc",<br/>    "name": "CSC",<br/>    "subscriptions": 15,<br/>    "suspended": []<br/>  },<br/>  {<br/>    "description": "BC Centre for Disease Control",<br/>    "group": "bccdc",<br/>    "name": "BCCDC",<br/>    "subscriptions": 15,<br/>    "suspended": []<br/>  },<br/>  {<br/>    "description": "Haines Junction (Yukon)",<br/>    "group": "hnj",<br/>    "name": "HNJ",<br/>    "subscriptions": 15,<br/>    "suspended": []<br/>  },<br/>  {<br/>    "description": "Ontario Ministry of the Environment, Conservation and Parks",<br/>    "group": "omecp",<br/>    "name": "OMECP",<br/>    "subscriptions": 15,<br/>    "suspended": []<br/>  },<br/>  {<br/>    "description": "Public Health Ontario",<br/>    "group": "pho",<br/>    "name": "PHO",<br/>    "subscriptions": 15,<br/>    "suspended": []<br/>  },<br/>  {<br/>    "description": "Manitoba grouping for PHAC",<br/>    "group": "MB",<br/>    "name": "MB",<br/>    "subscriptions": 5,<br/>    "suspended": []<br/>  }<br/>]</pre> | no |
 | <a name="input_function_app_url"></a> [function\_app\_url](#input\_function\_app\_url) | Absolute URL of the backend service implementing this API. | `string` | n/a | yes |
 | <a name="input_resource_group"></a> [resource\_group](#input\_resource\_group) | Resource group to use | `string` | n/a | yes |
 | <a name="input_subscription_id"></a> [subscription\_id](#input\_subscription\_id) | Azure subscription id | `string` | n/a | yes |