A VDR permission model that assigns access rights to a defined group of users rather than individuals.