use actualUserName to get roles from group service