Add new purchasing hires to group before access provisioning

Your new user accounts arrive without correct group membership, causing delayed purchasing access and manual tickets for engineering. Ensure purchasing hires have required group access so provisioning is ready before the next workday.