setup group-user association