assign users to folder specific groups instead of using local roles