# IAM: Users & Groups

* IAM = Identity and Access Management, Global service&#x20;
* Root account created by default, shouldn’t be used or shared.&#x20;
* Users are people within your organization, and can be grouped.&#x20;
* Groups only contain users, not other groups.&#x20;
* Users don’t have to belong to a group, and user can belong to multiple groups.

<figure><img src="https://285499051-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fax7GJwknK1WgU2PuMxcB%2Fuploads%2F8plerV92OgtquWssU8tx%2Fimage.png?alt=media&#x26;token=88ae139d-122e-4f93-8c1b-9cde52387bc2" alt=""><figcaption></figcaption></figure>
