Groups are used to separate users from each other depending on job role, lime role or other needed separations. It's also used in conjunction with security policies to control what rights they get.