avoid returning groups for non-workspace ids