Resource Groups:

Users are not directly granted rights to Resources. That is too cumbersome. Resources are placed into Resource Groups which are arranged in a hierarchical structure with inheritance. Access is granted or denied by associating an Access Group with a Resource Group. This is one of the most important sources of ISCS's efficiency.