Customer: Ford
Case: 03295402

Able to reproduce on 4.10 (Andrew Block).

Steps to reproduce:
1. Fresh cluster, 2 users, that are members of the same group with some permission (reproduced with clusteradmin)
2. User 1 logs in, is able to run oc commands, and log into web console
3. User 2 logs in, is able to run oc commands, and log into web console
4. User 1 is no longer able to run oc commands or log into web console
5. Deleting the group in OpenShift allows User 1 to run oc commands or log into web console