add roster api to check if current login user and each of the input
groups (:group) is element of (:owner).roster.(user).groups