Update user group memberships from role and title

Your provisioning inputs (title, department, employment type) aren't applied consistently, causing incorrect access and extra help desk tickets. Enforce role-based group assignments so access is corrected automatically and tickets close same day.