allow setting private attribute of user_groups on create and update

allow setting private attribute of user_groups on create and update #1618