ensure system groups