Currently, you can add a cluster t `user.clusters_ids` without adding the `user` to the members of the group of the cluster. This should be automatic.