Security refreshing?

Hi Team,

How does security work in terms of it being "refreshed"? I recall that when assigning roles in MyServices it took time for it to be provisioned, but what about for users that already have a proper role but get moved around within EPBCS Groups. Or when new groups are provisioned to new parts of the application?

We are currently fixing provisioning to people with "User" roles, and giving them new "write" access groups which should allow them to now write to these forms but are finding there access is still restricted.

Does access need to be "refreshed" or anything like that? How long do you have to wait after assigning a group new security or assigning a user to the group for it to go into effect?