The groups token replaces the group token. The groups token records the group entries from the process's credential.
The praudit -x command shows the fields of the groups token:
<group><gid>staff</gid><gid>other</gid></group> |
The groups token is output only when the group audit policy option is active.