Gateway network policy can't match user groupID, groupName

Is it a bug? The user groupname is listed as a selected under gateway network policy, but it seems it won’t take effect.