Groups

A group belongs to a tenant and holds members, and every membership carries its source: written here, or pushed by a directory. That is what lets a provider accept provisioning later without a directory silently taking over what somebody created by hand.

This page will describe the model, the sources, and what a claim about groups contains.