Our UI allows changing of usergroups only by modifying usergroups. But if developer use something like

user.usergroups = []

cache is not updated. I found this during testing external groups sync by apache module which uses this way.