Every process runs as some user, and that user decides what it can read, write or start. Users and groups exist so one machine can be shared safely, with services like postgres kept apart from people. You need this when you give a teammate Docker access or create a service account for an app. Do not hand out root or sudo for a one-off need; adding the user to the right group is usually the cleaner answer.