Validating a token's groups or roles
