Removed roles and added group since Open Directory does not store roles