Add support for adding/removing service users from service groups.

For bug 51990.

Change-Id: Idb105a57c6d6614b7ea93adb44a25954390f1044