One of the groups will have a DENY permission on ALTER or similar.

DENY takes precedence over any GRANTed permissions