CLOUD-197 User role handling: role groups, utility