Users and Groups are now identified by a GUID. User ids no longer collide with group ids so they can be combined in ACL configurations etc.