set user groups right in drop privileges