I’m also having a similar problem. Did you ever figure out what the correct thing to do in this situation was? How are users’s groups set when the user is not assigned to an application?
I’m also having a similar problem. Did you ever figure out what the correct thing to do in this situation was? How are users’s groups set when the user is not assigned to an application?