bug fix preventing removing all roles and groups