Domain & group users are optional