iam-user-group-membership-check