Must be at least guest and dba groups, hence minOccurs=2
Must contain the admin user at least, hence minOccurs=1
Each user must be in at least one group, hence minOccurs=1