A Security Group functions much like an email distribution group, but applies to access and permissions rather than email distribution. The requestor becomes the group owner (unless otherwise specified) and can add or remove members at will.