Example:  In Debian if user want to have access to journalctl without using root credentialas he must be added to systemd-journal group. /bin/journalctl is owned by root and group root so how it works ? How systemd-journal group has access and how to edit this permissions. I am not talking about permisisons to files and folders but maybe it comes down to that.
How group has access for something?
permissions;group