use group id's, no gaurantee they're the same as user id's