deactivate kss by renaming input id, refs #8527
give local roles to team groups instead of global ones, refs #8501