group needs to exist before user