When a user opens a Web App, the user data can be read out in a Technical Process using the User Identity Adapter.
The read out user data contains, among other things, the groups that are assigned to the user. The groups are contained in the output XML of the User Identity Adapter.