Grouping and role-based access controls for authenticated identities.