> add all people to a group i'm curious about this part - is it functionally declarative or is it more like "take all of the users that match this rule at this moment and add them to the group?"