We are copying cdb when moving across releases. We have updated a new user group and rules for the same in the latest xml. What we see on dumping the cdb is that old groups and rules are present and new user group and rules added are not reflecting.
If you keep CDB data when upgrading the schema, the *init.xml files which initialize a fresh CDB, will not be considered. So if you mean you configured new groups and rules using XML initialization files, I don’t think you will have what you want.
What you might want to do is to merge the new content with the existing Data in CDB after ConfD starts in phase 1 and before opening NB interfaces access.