so if the user is a member of groups A, B and C, then anyone in A, B or C will have

can_be_viewed

permission on that user