group needs to be created before user