Configuring identity groups