You have various support staff who need to access different remote machines and services. There are some remote machines and services that are sensitive, and you don't want many of your staff to access them. Usually, there are many services needed together, and often access only needs to be defined per-customer.
The creation of service group configuration files. Each support user's configuration file can reference different service group configuration files.