To assign roles to groups of users.

To give a group of users access to a specific object in the registry.

To identify the group of individuals who are authorized to approve certain types of requests.

To identify the target audience for certain policy actions. For example, the intended recipients of an email action.