Make user member of a dynamic group based on a secondary group membership

user.memberof -any (group.objectId -in ['group1-123-123-123','group2-123-123-123'])