Group
A Group is made up of one or more users with common permissions.
Groups are created and populated by Administrators or via a third-party authorization system (e.g. LDAP authentication). Each user in the system must be given membership in one Group, and can be given membership to multiple Groups. Group role membership is passed on to the user, meaning that the user automatically belongs to any roles that are assigned to the group(s) that the user belongs to. This is a convenient and often preferred way to easily change role memberships across groups of users.
In addition to providing a way of assigning roles to multiple users, the group also can be specified in the folder access rights interface, giving multiple users read and/or write access to folders and folder-contained assets.