The user groups granted via Sonar admin console are getting dropped and recreated with default access "sonar-users" every time a user logs in using Google's oauth mechanism. Looking at the OAuthGroupsProvider source code, seems like groups are recreated during every login regardless of what groups exist in the database.