Groups can indeed be dynamic in modern access control and identity management systems. A dynamic group's membership is automatically calculated based on defined criteria or attributes (such as department, location, or user properties), rather than manually adding each member. This allows membership to update automatically as user attributes change.