case u.GroupName != "":
        grp, err := user.LookupGroup(u.GroupName)
        if err != nil {
            status.RaiseLevel(resource.StatusCantChange)
            return nil, fmt.Errorf("group %s does not exist", u.GroupName)