What it is: "allowed only for group"?
Users can be members of the group.
For example, there may be a group of "customers" and "guests." Then you can make sure that guests can not execute client commands.
You can use BJS code for adding user to group: