Initial addition of groups to user/policy