Collections of users that can be assigned roles and permissions collectively in LogScale's authorization system.