If you open a Group document or a Database document, you will see a button near the top called "Open Group Map".

• in the case of a Group document, a Group Map is a visualization of all the subgroups (and subgroups of subgroups, etc.) for that group
• in the case of a Database document, a Group Map is a visualization of all the groups that have access to the database, and all the subgroups (and subgroups of subgroups, etc.) that also have access via those groups

For example, here is a Group Map showing all the subgroups for a Group document:

You can see that the Administrator Group (in the middle) has several direct subgroups – all the groups with a line pointing directly to the group in the middle are direct subgroups. You can also see that the Server Administrators group is both a direct subgroup of the Administrator Group, and also a subgroup of both Database Administrators and Web Administrators, which are then direct subgroups of the Administrator Group.

The color of the groups corresponds to the type of group they are, as seen in the graphic that is displayed if you click the "Show/Hide Legend" link at the bottom left-hand side of the Group Map page:

Similarly, here is a Group Map for a Database document:

You can see, for example, that Nested Group 3 has access to the database because it is a subgroup of various other groups, even though it isn't listed explicitly in the ACL as a group. You can also see a circular reference between two of the groups, which doesn't cause any problems but might be a mistake in the Address Book.