The purpose of Groups is to delegate administration to sub-site administrators; nothing more. Group Admins can create and manage users and workspaces within the group they are in charge of. Each Group Admin is isolated to a single group, therefore you could think of Groups as Departments or Teams. Please do not presume that Groups refers to group permissions; it does not. The ability to clone permissions among users is a feature on our development roadmap.