GWT-585: assign groups/roles (=profiles) to user