Expected outcome is that the constraints should be ORed and the Admin should be able to edit his Group's Users while searching for all usertype=external users (users not in groups).
At the moment, the Admin can not find any Users of type external (not in Group) add to the Group.
Upgrade VIP Authentication Hub 3.2.1 to benefit from fix DE614110 and solve this issue.