groups have disjoint users

This requirement has no options.

Purpose

Warns when the specified groups have users in common across two or more groups. Immediate group membership searched (non-recursively) and group members are compared.

Notes

This requirement is only useful in sections with wildcards, with multiple groups listed in the section, or both.

Where this requirement might be used

AD-based VOIP agent groups for an individual line or call option where you do not want the same user to take calls on more than one line/call option.
AD-based mail-enabled groups used as Contacts Database (CDB) groups where members of the AD group have a role (Primary contact, Backup contact, Administrative contact, etc.) on a CDB model. CDB domain documentation says the same person should not have more than one role in the same CDB domain model.
Any set of AD groups where it is unwise or nonsensical for any group member to be a member of more than one of a set of groups — granting the same group member contradictory permissions in AD groups intended to convey what someone is allowed to do in a folder, for example.

Examples

[group:"CN=\*,OU=Contacts Database (disjoint users),OU=Martinet demo,OU=J.B. Nicholson,OU=FC Computers,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu"]
# Warns when a group member is a member of any group in the following OU:
# OU=Contacts Database (disjoint users),OU=Martinet demo,OU=J.B. Nicholson,OU=FC Computers,
# OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu
groups have disjoint users

Example output

Line 8: The following 2 users are members of multiple groups which should have disjoint membership:

User name (sAMAccountName)	user objectGUID	is a member of groups
jbn (jbn)	0290b261-15b2-4b65-b0bf-13df9775ae76	2 groups: jbn Backup unit users; jbn Primary unit users
wislande (wislande)	bfa823b7-2b66-4dd6-87a3-0d802505ed7e	2 groups: jbn Backup unit users; jbn Primary unit users