- change some docs around
- rename groups to roles
- output proper order of user first group modification second