make user/group management optional