the "assign groups to users..." section is confusing