defer store.unlock()

	gi, ok := cache.iamGroupsMap[group]
	if !ok {
		return updatedAt, errNoSuchGroup
	}

	if enabled {
		gi.Status = statusEnabled
	} else {
		gi.Status = statusDisabled
	}
	gi.UpdatedAt = UTCNow()
	if err := store.saveGroupInfo(ctx, group, gi); err != nil {
		return gi.UpdatedAt, err
	}

	cache.iamGroupsMap[group] = gi
	cache.updatedAt = time.Now()

}

func (ies *IAMEtcdStore) loadGroup(ctx context.Context, group string, m map[string]GroupInfo) error {
	var gi GroupInfo
	err := ies.loadIAMConfig(ctx, &gi, getGroupInfoPath(group))
	if err != nil {
		if err == errConfigNotFound {
			return errNoSuchGroup
		}
		return err
	}
	m[group] = gi
	return nil
}

func (ies *IAMEtcdStore) loadGroups(ctx context.Context, m map[string]GroupInfo) error {

	// `jwt:groups` works.
	if grpsVal, ok := claims["groups"]; ok {
		if grpsIs, ok := grpsVal.([]interface{}); ok {
			grps := []string{}
			for _, gI := range grpsIs {
				if g, ok := gI.(string); ok {
					grps = append(grps, g)
				}
			}
			if len(grps) > 0 {
				args["groups"] = grps
			}
		}
	}

	return iamOS.saveIAMConfig(ctx, u, getUserIdentityPath(name, userType), opts...)
}

func (iamOS *IAMObjectStore) saveGroupInfo(ctx context.Context, name string, gi GroupInfo) error {
	return iamOS.saveIAMConfig(ctx, gi, getGroupInfoPath(name))
}

func (iamOS *IAMObjectStore) deletePolicyDoc(ctx context.Context, name string) error {
	err := iamOS.deleteIAMConfig(ctx, getPolicyDocPath(name))

’aYS±×jX_óÊM[&`®üÊÄécdÝ Ûà<”†¾— ±8”! ¿gVÙ· $0ƒÔ ©ÝW F[£C 7U#!z YñMƒå=y„ @*Ç ¢Ÿ× "êðÍÜ oÏÿâø/ ‰Á ¤Á{è ‘$aÃÕµO{1 ¨Û®5æ7J(hÔ ´JŽ„DŒÏ»_¦›&HÒþƒZ7Èk| § énaÁ™ È,µÕkø ŒV×# ̬U OÔW~ QãËàYwã ó °æ{P s%Ö|o=0{ dC ÉNcù©©u¾¬Ë6ÄÃ;'À Qñ R û¡°ö ­nž}? ˆMŽš an–¾8Y@€ õñ R ]ì‘Gi ã1ä‘þ†ŠÒ'ð;ƒ±ªìû„WMÐଞ7ùÅò'´B»£Ô4žùóR2”Bð ü ý ½·N¹Iƒ”)¹üÒì®’ òì ÉR5 -P}ŒI SjXÑê¡EDó<¿Œîh [Îó;Ú j 2”Csˆ °”náwÆü ã §§¢ )0Q˜Ý¥kùvÝŠ ± û+„Ã=Á̇ º\ åS•› …:i vU}j‡(@åôHüW+”þ N šuUˆ€„(™uhœ[¦â-f л½¹´:–‘! ˆ;d}{ Oó ô^•õ|Çï•æýÞçì3é‡ BA?i‚ i{‰,Ÿå ×µÂa»‡!(øð:ð...