Specifying the users and groups to which the rule applies