Difference between User Administration -> Groups & System Security -> Groups

[Brandon R]

What is the difference between Groups in User Administration and Groups (Users and Groups) in System Security??

[Michael Ritchie]

They are the same thing.  The reason groups and other links appear in multiple applications is to "compartentalize" things as well as provide a means to control access to things.  For example the System Security app is only accessible by a user with the admin role while the User Administration application is accessible admins plus user_admins.

[Brandon R]

So to clarify, those with the admin role could use either System Security or User Administration to administer groups??  But, only users with the user_admin role can administer groups but only via User Administration??

[Michael Ritchie]

Users with the admin role automatically inherit all roles so that is why you see duplicate application modules.  A user with the user_admin role would only see the User Administration application.

But all of this said these application modules all point to the sys_user_group table so they basically do the same thing.  Access to this table, records within this table, and fields within this table are centrally managed via ACLs.  So the user_admin role grants access to view, edit, and delete records in the sys_user_group table.