Document an additional approach for managing user-roles for transient-users via groups. Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>