Modify the roles/users/ sequencing to make moving users between groups safe

[bkus]

The high-level concept here is to make sure the target group(s) are fully created and imbued with all their necessary permissions before moving any users into them.