When setting up profilesbased policies are group memberships determined on the primary or the subm (4267432)

When setting up profilesbased policies are group memberships determined on the primary or the submithost?

The profile based policy uses the users group memberships as defined on the submit host.

When you run a command, pmrun sets up a bunch of the event variables for the primary to evaluate. Among these are the group and groups variables which correlate to the primary group and secondary groups of the user who submitted the command on the submit host. The group and groups variables are what the profileBasedPolicy.conf uses to compare against authGroups in determining if the specific profile applies.