How are you doing the "vip for lifetime" set up? If it's a paid subscription then you can set the customer's usergroup as a secondary usergroup. Or why not give the VIPs the same permissions as the customers? That way they don't have to be a member of two usergroups.