The database field User is used to store the actual security permissions assigned to the User group. It appears in the group permissions table.