private static IEnumerable<Role> GetRolesWithExternalGroup(IReadOnlyCollection<Role> roles) { return roles.Where(g => !string.IsNullOrEmpty(g.ExternalGroupName)); }