I'd like to see a more complete check here that checks whether or not the response is present for both users and groups, including some basic checks (id, displayName, visibility).