Permission groups

Groups compose capabilities. Membership is one group per account.