added manage_users_groups attribute