You will probably need to use an array of clusters, where each cluster has a username, password, and group. I doubt that you really need the passwords, but rather a password hash. If you have a one way encryption function you can store the password hashes. When a user logs in, encrypt the password they entered and check it against the encrypted password in the database. It doesn't matter if the encrypted passwords are visible to the administrator, because they are encrypted.
Or you can not encrypt the passwords and set the password string in your cluster to password display (******).
-Jim Kring