In RACF, a user attribute assigned at the group level that allows the user to control the resource, group, and user profiles associated with the group and its subgroups.