CC 3.6: group membership and policy applied

Hello Community.
I have the following scenario with CC 3.6 where a user/device belongs to a couple of groups: first one is a user group (static) built for underage users and the second group is a Dynamic device group for MacOS laptops. After creating this two groups I am able to intersect them just for this user that is underage and that have a MacBook. Now, since the two groups have different policies set configured, which one will be applied to him?
I can't found anything related to CC 3.6 on Knowledgebase. Have you any hints?
Thanks
Category: Capture Client
0