external interface: add user group