add-users/remove-users tests

external usergroups permission