A set of one or more Identities that can be authorised under one Rule. An Identity may belong to zero, one or more groups. Grouping is usually done for ease of management.

Source: http://identityaccessman.blogspot.com/2006/08/identity-dictionary.html