For Twingate to provide remote access to resources, two complementary configurations need to be in place:

1. Resources—any hosts on the remote network—must be registered and accessible via at least one Connector.
2. Users must be connected to Resources through membership of Groups.

Groups serve as the connecting glue between these two configurations. A Resource must be part of a Group that a User is part of for access to be authorized.

These concepts are explained in more detail in the following sections.