maintain user/group/role's operation of relation