Can a user be assigned to two external groups?