7.2. Group Management

Treating a collection of users as a single entity for one or a number of purposes eases a lot of administration tasks. For example, instead of performing 100 operations to assign permissions to each of 10 users to 10 resources, you can assign the users to a group (1 operation) and assign the group permissions to the resources (11 operations). The math makes it clear why you should use groups. Instead of dealing with individuals, you deal with the collective or the group.

In fact, best practice is that you always use groups for assigning permissions. Therefore, you need to know how to create groups, modify memberships, and remove groups.