Group Membership entitlement
When granted during the Grant step of Enforcement, adds a target user account to a specific target group. Active Directory target systems and Azure AD target systems have a separate Group Membership entitlement for each available group.
When revoked during the Revoke step, removes the target user account from the target group.
Note
A group is not a HelloID group—unless HelloID itself is the target system (see Provisioning GitHub resources).