Endpoint Administration Guide for Windows › Scope of Administration Authority › Group Authorization
It is necessary to understand the concept of parentage before discussing group authorization attributes.