Use groups to grant access Your company uses Active Directory groups to grant access to ressources depending on the membership in a specific group. For some groups your users should decide by themselves if they want to be member of the group. Example: Access to a specific folder is secured by permissions given to a specific group. But basically users should be able to access this folder - but they have to initiate getting permissions.