Because user maintenance is complex in our case, can't link group to the users inside spiceDB