apart of setting the group owner, we also need to make sure to assign the "vsite admin" and remove any other roles.