Is there a way so that users can be given access to create one group only. and join one group only. 
I will attempt to explain.

We have a league site that have leagues in multiple locations.  at certain times of year registration is open for users to create "teams" in the leagues.
In the teams there are 2 classifications.  Managers and players.  The managers would have access to "create a group" users would have access to "join" a group.  We need to control that in each instance it can only be done once... (when they make a payment). Once they pay managers can create a group and users can join them.  Each would only be one instance... then after it's done.  both users would not have access to create or join another.

But... they could pay again to start the process over again.

Was toying with the idea of adding them to roles and once they joined or created 1 instance.. the role would be automatically removed.  
Is this possible with AS?

If not... any ideas on how this can be done?
Thanks
Hazen