If a secondary usergroup is added to an upgrade package after it has been purchased would it automatically grant the secondary usergroup? If not, after adding the secondary usergroup manually would it have to removed manually when the original upgrade expired?
The change is not retroactive to previously upgraded users. In my testing I found that you need to downgrade and then re-upgrade existing users to properly enter them into the subscription with the new groups specified. Once they are resubscribed then the removal of those groups will be handled automatically when the upgrade expires.
The only easy alternate method I can think of would be to create a new upgrade package with the secondary usergroup and manually upgrade the existing subscribers. And once those subscriptions expire I could delete the package.