At the moment when you create a new user, you cannot add select the user group they should be part of in SM or CM until they have logged in to the portal. Therefore you need the user to confirm once logged in, to do then be allowed to update the user group.