Terminology

To clarify the terminology used within this document, a Principal represents both a User and a Group.

A Group is a container or a composite entity comprised of Principals as its members. For example, a group can be comprised of users and groups, with the exception of recursive group membership.

A Principal can be a member of multiple groups, at the same time.