When we add User Groups for Users in the User Card, the Permission Sets in the User Groups are automatically added for the User. However we can manually add additional Permission Sets for the User. So over time, we cannot assume that Users with same User Groups have same Permissions Sets.
To avoid this situation, can we restrict User's Permission Sets to what is included in User Groups? Basically do not allow manually adding Permission Sets in the User Card.