Can UNIQUE group membership be designed in ARS?

I have a situation where I have three particular AD groups which users can be members of, but any one user can only be a member of one of the three groups.

I would like ARS to police this until we have all roles & policies in AD/ARS finished. At the moment, while we are setting up ARS policies, we have an-in-house app which crashes when a user is a member of more than one of the three groups.

Thanks for helping.
No Data
Reply Children
No Data