Yes, a user must be a member of at least one group.
This is true, but there's more. Keep reading.