User w/ multiple roles - different privilege sets - MS Entra ID member of multiple groups

[Scott Cooper]

New question for me but sure this is an old topic.  FMS 2025 on Windows Server External Authentication MS Entra ID (AD).  Users are members in multiple groups A, B, C.  FMP file has matching accounts and privileges sets (PS) with different levels of access per PS.  When user authenticates is there a list (a, b ) of the member's groups passed to FMP? if so, what function returns?  I understand FMP will authenticate to highest sorted order in the PS list, next question...what is best practice for user to switch to additional account/PS?  Trying to avoid managing user level AD in FMP.  Thanks in advance.