Which term refers to divisions within broader identity categories?

Which term refers to divisions within broader identity categories?

• A. Vendors
• B. Subgroups
• C. Batch Accounts
• D. Administration

Answer: (B)

Subgroups enable hierarchical organization of identities, allowing divisions within a larger group. This lets you create smaller, more manageable units inside a broader identity category and have permissions flow from the parent group to the nested groups, simplifying scalable access control and policy management. For example, an overall “Employees” group can contain subgroups like “Engineering” and “Sales,” with each subgroup inheriting common permissions while still allowing exceptions at the subgroup level. The other options don’t describe divisions within identity categories: vendors are external entities, batch accounts aren’t about organizing identities, and administration refers to a role or set of privileges rather than a subdivision.

Subgroups enable hierarchical organization of identities, allowing divisions within a larger group. This lets you create smaller, more manageable units inside a broader identity category and have permissions flow from the parent group to the nested groups, simplifying scalable access control and policy management. For example, an overall “Employees” group can contain subgroups like “Engineering” and “Sales,” with each subgroup inheriting common permissions while still allowing exceptions at the subgroup level. The other options don’t describe divisions within identity categories: vendors are external entities, batch accounts aren’t about organizing identities, and administration refers to a role or set of privileges rather than a subdivision.