Endpoint Encryption users can belong to any number of groups while Endpoint Encryption devices can only belong to one group. The default group is the
group that controls the user's policies. The first group listed in the group membership
is the
default group for the user.