When a user is added to a group that doesn't have role assignments, then the user permissions are reset to "USER".