handled group/user/both specification