text: Another reason for giving groups rather than individual users access to application groups 
  and folders is that the application group, folder, and cabinet administrator does not have 
  access to the users and groups in this model. Because the application group, folder, and 
  cabinet administrator must first be granted access to any users or groups that require access 
  to application groups, folders, or cabinets, it is simpler and less time-consuming to give 
  access to a few groups rather than hundreds or even thousands of users. The application 
  group, folder, and cabinet administrator is given access to a group by adding the application 
  group, folder, and cabinet administrator to the group. This task is performed by the user 
  administrator with the Create Groups authority. As a group member, the application group, 
  folder, and cabinet administrator can see the group in the list and can grant group access to 
  any application groups and folders on the system. 
  
  To give an application group, folder, and cabinet administrator access to a user, the user 
  administrator with the Create Groups authority must update each user and give the 
  application group, folder, and cabinet administrator access to the user. After access is 
  granted, the application group, folder, and cabinet administrator can see the user in the list 
  and can grant the user access to any application groups, folders, and cabinets on the system. 
  Again, this approach is not recommended because this task must be repeated each time that 
  a user is added to the system. 