Managing groups
You can reduce the time that you spend managing user accounts by creating groups of similar user accounts and assigning IT policies, to the group. Properties that you assign to a group are assigned to all user accounts in the group.
You can assign properties to user accounts at the individual level or group level. The properties at the individual level override the properties at the group level.
After you add a user account to a group, you can override the properties that you configured for the account at the group level by changing the properties at the user account level.
If you remove a user account from a group, the account name remains in the global users list but it does not appear in the group list.
