non default profile assumes strong passwords
oauth.approvals is a default group for every user