Better user/group APIs