Group can be different from User

App group and app user are not necessarily the same in POSIX. 

Setting a different group can be useful to set privileges for multiple users ('www-data', 'deployer', etc.)