Sane user group checks