SharePoint groups are defined at the site collection level, and consist of a set of SPMember objects, being these either individuals or groups.
Access control is achieved by assigning each group a permission level (called a role), and assigning this to a particular securable object (called a securable scope inside SharePoint).
