what user-group do we need?