If upstream users list is empty, all users will be valid.