Security in SharePoint is comprised of users, groups and roles.
Users, Groups and Roles
A user account comes from the authentication system. For example, if Active Directory is used to authenticate then the user accounts will come from it.
There are two types of groups SharePoint uses: domain groups and SharePoint groups.
View Complete Post