duplicate of Why is there no service call to set domain specific groups
Please vote on that one instead.