if an OCP user is approved, add him also to the respetive group