Allow non-ldap group definitions