For more information on applying authorization to user/user groups as well as more generic descriptions regarding authorization principles, see Accounts.