MyRealm: groups + roles.