The system contains predefined user groups. Users are automatically assigned to the corresponding user groups if they become member of an application. User groups consist of the users that are assigned to the user group and the roles which are assigned to the user group.
A user group can be assigned to an application as a standard user group for new users. That means that a new user who becomes a new participant of an application will automatically be a member of the defined user group and this way get the roles that are assigned to that user group.
User groups can be nested in a tree. Granted or denied permissions in a tree branch always overrule any conflicting permissions on a higher level in this tree.

User groups can be rearranged via drag and drop functionality in the tree.