Hi @k28j6 (k28j6)​,

Thank you for posting on the Okta community page!

I have done some research and it seems that the user will inherit the profile from whichever group they are a member of that is highest in the priority, as per the documentation provided below:

• https://support.okta.com/help/s/article/When-a-user-is-assigned-to-an-app-through-multiple-groups-they-only-inherit-the-profile-from-one-of-the-groups-and-not-all?language=en_US

In addition to the above, I would also recommend to check if the option “Combine values across groups” is disabled to make sure that the user will inherit the profile from one group and not from all. The below documentation provides a scenario on how this functionality works:

• https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-combine-values-use.htm

In regards to your second inquiry, it depends on what Provisioning options you have enabled for this specific application. I have provided below a documentation with the provisioning options available for Google Workspace:

• https://help.okta.com/en-us/Content/Topics/Provisioning/Google/google-provisioning.htm

Also, keep in mind that users assigned to an application before provisioning is enabled are not automatically provisioned:

• https://help.okta.com/oie/en-us/Content/Topics/Provisioning/lcm/lcm-provision-unprovisioned-users.htm

I hope the above information is useful!

On another note, the Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.