return r[i].User < r[j].User
	})

	return r
}

// Assumes store is locked by caller. If groups is empty, returns all group mappings.
func (store *IAMStoreSys) listGroupPolicyMappings(cache *iamCache, groups []string,
	groupPredicate func(string) bool,
) []madmin.GroupPolicyEntities {
	var r []madmin.GroupPolicyEntities
	groupsSet := set.CreateStringSet(groups...)