The Group flag indicates that the principal is a group (as op-
  posed to an individual).  If you set the group flag, the access
  control checking code will expand the group to determine
  access.