default-assignments {
  wkmemberrule {
    if {
      has-true="<group.default> | <group.wkmember>"
    }
    take = [
      "group.default"
    ]
    set-primary-group="wkmember"
  }
}