A group of user accounts, organized to allow aggregate assignment of permissions. Individual permissions are often assigned to user groups, rather than individual users to ease management.
Some systems further abstract permissions to roles. Permissions are assigned to roles, while users are assigned to user groups. Groups and roles come together to determine final permissions.