s4:auth Allow the operational module to get a user's tokenGroups from auth