updated ui to allow association of groups to roles