A person is an identity: a name, email addresses and postal addresses. A user is a person’s sign-in, frontend for members or backend for admin users; an author is a person’s public byline. Groups collect people, and permissions are granted to groups per module, entity or record.