You have to assign the group to the records and make sure User 3’s role has rights set to Group in order to see Group 1 and Group 2 records. If User 3 cannot see a given record make sure that the correct groups are in the Security Groups subpanel and that the user has access to those groups.