so if a user connects directly, or that user is part of a group, the LRS must include that user as an Agent in the authority.