order of removing: first user, then group