You configured sign-in risk policy in Azure AD Identity Protection, the assignments is configured to include GroupA and GroupB. What happens if a user is assigned to both groups?