Preserving group membership

When defining command rights, you should consider whether keeping a user’s existing group membership would provide benefits for command execution or could be exploited to perform unauthorized operations.Select Preserve group membership if you want to retain the logged-on user’s group membership while executing commands.