Description in man page "man sssd-simple" is not clear when two allow lists are defined.

The simple access provider grants or denies access based on an access or deny list of user or group names. The following rules apply:

 - If either or both "allow" lists are provided, all users are denied unless they appear in the list.

It is not very clear whether user can be granted access when in either list (simple_allow_users OR simple_allow_groups), or must be in both lists (simple_allow_users AND simple_allow_groups).

Recommend to consider:

• If either or both "allow" lists are provided, all users are denied unless they appear in any of the list.
• If either or both "allow" lists are provided, all users are denied unless they appear in all of the lists.

Impacted version:

rpm -qa | grep sssd-common

sssd-common-2.9.1-4.el9_3.5.x86_64