...
Summary
You can add a user, applicationservice principal, or group to be the member of a group. If a group is a member of another group, then all the members of the member group are effective members of the parent group. The thing that is added to the group is referred to as an entity, subject, or member. Note: a service principal could be a credential that a web service user uses. It could be a local entity in Grouper or something represented in an institutional subject source.
Privilege requirements
If a UI user has the appropriate privileges on a group, they can add a member to the group.
...