Using only the `is_admin` flag is a problem, because since the introduction of the permission systems new users might have only the admin permission without this flag set. It's better to use either one of them and delete the permission column only after updating the group.