Get all users who are not in a group Get all groups for a user Check permission downgrade on permission update
