WL-3033 Make sure groups update with multiple roles.

This fix has the limitation that role cannot contain a comma. This is not specified anywhere in the documentation, but should be the case.