Groups can't have ROLE_USER anymore.