...
LSST can enforce data access rights through group membership. Furthermore, LSST intends to enforce User-Generated data access rights through group membership. Since we intend on using LSST groups membership to determine data access rights and access to other LSST resources and services, a group naming convention must be established. Groups must adhere to the following format:
lsst_<data-level>_[<identifier>|<UG>_<identifier>]
...