A group is used to provide roles to PAL. If a User is member of a Group, that group will provide possibilites for the user to perform different tasks.