A group contains a collection of power-users to which you can apply permissions. You can grant permission to a group in the same way as granting permissions to a power-user. Power-users can belong to more than one group.
|Only power-users can be members of groups.|
A power-user's permissions include their user-level permissions plus all of their group permissions.
If a group is not granted any permissions, but a specific power-user in that group has permissions, then the power-user still has these permissions.
If a group is granted full-control access on a server, but a specific power-user in that group has permissions set on that server that are less than full-control, then the group permissions are used.
If a power-user belongs to multiple groups, and two or more of those groups have permissions set on the same resource, such as a server, then the most liberal group-level permissions are applied. If one group has less than full-control access, but another group has full-control, the power-user is granted full-control access.