Users are members of both Folder groups and Resource groups. These two group types represent the primary ways users are organized in the security model. Folder groups control access to specific folder hierarchies, while Resource groups manage access to specific resources or objects within the system.