This is where Access Groups are defined. These Groups are sometimes termed as 'department'. These are used to 'group' access types to tie together a group of Resources that may be selected from.