Using CreateGroup without assigning an account entity will make title entity assigned and title will be the default Administrator of the generated Group. Then Entity API ListMembership can list all groups and roles for an entity. the question here, what's the downside for this approach "performance and limits for how many groups can be created that way"?