@manishhtmedia what directory integration are you using (SCIM or AD Importer)? If SCIM, what IDP are you using? Keep in mind, there is a delay depending on the source of when the updated group membership is pushed to Netskope. This varies by source but can range from immediately (SCIM with Okta) to 3 hours (AD importer default value which can be shortened). There is an additional interval for group syncing to the proxy itself. However, a client install should not be necessary regardless.
Sam Shiflett Netskope Solution Architect - North America
The best option for policy management when it users is to establish groups and apply those to or in policies. This will allow for the addition or removal of users in a tenant without worrying about individual users being referenced in a ticket.