The Groups, Roles, and Users properties are optional. However, you must specify at least one of these properties.