Hi @Paulo6 ,
It depends on the role which has been given to the group in ask, the user should have that role.
Let's understand with an example, Let's say you have Group called "App Owner", it has "sn_vul.app_read_assigned " and "cmdb_read " roles.
You have another group called "Analysts" it has 2 more roles "incident_read" and so on
So if you are the user having the above roles will have access to any assigned items to these groups such that you can transfer to another group.
Or if you are part of the above groups then automatically you will get all the roles.
