"It allows users to request access to resources such as shares and folders, rather than initially specifying groups." . . . . .