A Group has members that can be either Principals|keyword=Principal or other Groups (nested). Groups essentially become a way to organize Entities (via Principal relationships) and other Groups within logical categories. Groups can be given authorization to perform actions within applications by assigning them as members of Roles|keyword=Role. Groups can also have arbitrary identity information (i.e., Group Attributes|keyword=Group Attribute) hanging from them. Group Attributes might be values for 'Office Address,' 'Group Leader,' etc. Groups can be maintained at runtime through a user interface that is capable of workflow.