Username used as the identified one.
Profile (identity and preferences).
Gather a set of users.
Applicative or business.
Tree structure.
No inheritance.
Expressed as /group/subgroup/subsubgroup.
Qualifies the group belonging.
"Member of group as XXX".
Expressed as manager:/organization/hr, *:/partners.