restriction group

The restriction group is a set of objects (such as users, accounts, and subaccounts) that are grouped together to define how access to those objects is controlled.