Access control rules determine which resources are available for users or groups of users. Accordingly, you must define users and groups in AMC that map to users or groups stored in external user directories or in the local user authentication repository on the appliance. At a higher level, communities organize users or user groups that share common characteristics, most notably access policy and access methods, and can also be used in access control rules.