Although, I've also seen this pattern a lot. My expectation would be that the user resource creates the group, automatically assigns the user to that group, and all is well. But these are computers we're talking about.