Syncope supports from its early days the so-called group-based provisioning, e.g. members of group G, with G having resource R assigned, are considered for propagation to R.
This mechanism works fine for static group assignment (e.g. an administrator assigns U to G) but not for dynamic group assignment (e.g. the dynamic condition for G matches U).