only show online users when allowed
edit user group