If our help desk creates a new users on the BES I'd like to see those new users automatically get assigned to a default group. Our help desk is allowed to add users to the BES, however, until those new user(s) are added to a group, those new users are unavailable (Can't be viewed or edited) to the Help Desk staff because the new users are "groupless."
This is a direct result of specifying that the help desk staff can only edit & view users in specific groups, (Which apparently precludes them from viewing users who don't yet belong to a group) yet during the process of adding a user to the BES, the help desk staff can't specify the group the new user should belong to.
My goal is to prevent the help desk staff from viewing or editing users in one particular "Presidential Cabinet" group, while allowing them to add, edit, and update new users in other groups or users not in a group yet.

.