nested group memberships (group->member)