Fix: create group before assigning user

As found in our integration test, we need to have our group created
_before_ we can put a user into it.