This screen is available only for a private category. Here you can select users and groups authorized for this category.
You can deny or grant groups for the current category. By modifying groups authorizations, you'll probably modify the list of users granted to the category thanks to group belongings.
You can deny or grant individual users. Users granted thanks to group belongings can be denied or granted specifically.