Which of the following describes usage of an identity group?

Identity groups primarily function to *apply* policies to entities within them, not to limit policies that would otherwise apply; an entity's effective policies are a combination of its direct policies and those inherited from its groups.

While identity groups can facilitate mass revocation by revoking the group's associated access, their fundamental purpose is to simplify policy assignment and management, not primarily to enable credential revocation.

Auditing token usage is a function of Vault's audit devices, which log requests and responses, and is not a direct usage or purpose of identity groups.

Identity groups in Vault serve as a logical container to associate a set of policies with multiple entities (users or machines). This allows operators to manage access control efficiently by assigning policies once to a group, ensuring all members receive consistent permissions.