require that groups referenced by services are defined