Why Knowing About Group Membership Is Important

A group is typically granted certain privileges on a machine. By extension, the members of a group are afforded the same privileges granted to the group. Understanding who is a member of a group can help you limit the number of people able to perform certain functionality. For example, it is considered a best security practice to limit the number of people assigned to the administrator group. In fact, some guidelines recommend that certain groups contain no members at all.