Users can grouped in groups associated with a list of applications. Members of a group get access to the applications associated with it. See also Group domain documentation.
The group pages are: the list of groups page and group view and edit pages.
agate-administrator role can access these pages.