I have used user groups heavily while designing access control policies. I find user groups very convenient as it's very easy to implement with
Another reason I have organized the users with various groups is to implement (minimal) RBAC. But when I saw the
sudoers file (of the company I am working for) I saw that it's consists of various
User_Alias instead of using groups. I got the point of using
Host_Alias but my questions are,
- Why use
- If I want to use group is it good or bad from organizing and security points of view?