migrate group to role