Should PROFILES be used to group users when setting up security on a system where CA Top Secret is not used.
Grouping users in a profile allows all users of a particular department or job description to share the same security without requiring a separate profile member for each user.
The advantage of profiles is that security can be shared, but individual users may have separate initial command, key definitions, and so on. This allows you to change a security setting at the profile level rather than each individual user.
In earlier versions of CA FAQS ASO, models were used to provide a similar feature.