[auth] extern groups

* create and update groups by external Request

(#5046)