iam-group-has-users-check