How does the relationship between users and groups work?