In our application instead of a list of groups users are assigned to a single role.