It is better to use a Project role versus a Group role when using conditions and validators
Depends on the use case but I would say groups depending how they are managed