Order of resource assignment when user assigned multiple network access resources

Good day,

What logic or method is used by the F5 APM to choose which network access resource takes affect when a user is assigned multiple network access resources?

In my environment (BIG IP Virtual Edition APM+LTM 16.1.4 two node cluster) we are assigning different network access resources based on group membership.

Some users are members of multiple groups that are being assigned different resources, which often is resulting them in having the "general user" settings and address pool take affect instead of the Executive settings and pool, to which they are also assigned.

I haven't been able to determine the logic that APM is applying to determine which resources take precedence. It doesn't appear to be the order in the Advanced Resource assignment. It almost looks alphabetical.

Thanks

Chris