When syncing google directory and using auto provisioning how do apps get assigned to users?

Once I enable auto provisioning from Google how will I control what apps users have access to on the Adobe side?

Does Adobe sync all my Google groups or OUs and then let me map those to specific apps or what?