add groups and roles, tests for roles