Okta Groups

I set up the okta integration via SAML for SSO.  I created groups in Okta with the same exact name as the groups in Zendesk.  

Two things:

1. I am not sure which option to select under "Ticket Access Restrictions" in the "Edit Group Assigment" in Okta. Image below
2. And when the user gets pushed into Zendesk from Okta, the user goes into 2 groups. The default group and the group I want the users account to go into.   Is there a way to stop it going into the Default group in Zendesk?
   

Thank you