Issue Summary

Users can manually be removed from the SCIM synced groups when viewing their User Details within User Management

Steps to Reproduce

1. Configure an Atlassian Organization User Provisioning and PUSH Groups with members into the Cloud Site
2. Locate a Pushed User within the Cloud Site's User Management and view their Details
3. Navigate to the Groups section, click on the ellipsis icon for a Pushed Group (indicated with a Padlock Icon), and Remove User From Group

Expected Results

An Admin should not be able to edit the membership of Pushed Groups as these Groups controlled/managed by the IdP with SCIM/User Provisioning

Actual Results

User can be removed from the Pushed Groups including the "All Members in Directory" group created by Atlassian

It is not possible to manually add or remove Users from Pushed Groups:

Workaround

The IdP should be able to add Users back into any synced Push Group, however, the User may not be pushed back into the "All Members in Directory" group