Feature - Groups instead of just having users (due for r48)

In addition to user accounts, can we have groups too?

This would be useful across other features.

If we are able to associate things with groups is it possible to associate an email address with the group also? for example for a firewall control this may be associated with our network & Infrastructure team that have their own group email.

this is nearly done