Introduced UNKNOWN group matching for user without roles (when useRolesToFilter is true)