There are two special groups in the list of users and groups: Everybody and Registered Users. The difference between the two is that 'Everybody' includes both unregistered and registered users while 'Registered Users' only contains registered users.

A rule for 'Everybody' outvotes any other rule in a domain, regardless of the priority, and all users are a member of the group 'Everybody'. The implications are as follows: suppose a rule states that access to a resource type in a certain domain is denied for user X and another rule states that access is allowed for the same resource type in the same domain for 'Everybody'. Since a rule for 'Everybody' outvotes all other rules within its domain, the 'Everybody' rule is effective and access is allowed for everybody including user X despite a rule denying him/her access. The same holds in the opposite case: a rule stating that 'Everybody' is denied access will always result in denying access to each individual user despite the allowing access rules that might exist.

A rule for 'Registered Users' is very much the same as for 'Everybody'. The only difference is that a rule for 'Everybody' also outvotes licenses, whereas a rule for 'Registered Users' does not. To put it another way, if there is a license set for a resource (see also Section 3.4), together with a rule saying that access is allowed for 'Everybody', the license does not have to be accepted first. If, by contrast, the allowing rule applies to 'Registered Users', the license does need to be accepted first.