When assigning permissions, you'll follow these basic steps.
While you can assign permissions to individuals, you'll most likely
need to assign the
same permissions to several users in the form of a user group.
Each user group you create can represent a different category of
people, from a permissions perspective. For example, you might have user groups for
administrators, managers, moderators, bloggers, people in the HR department,
people in the Products department, and so on. You create user groups based on
how you want to structure access to your community and its features.
Create a user override for special cases.
For example, you might want all
but one or two people in a particular user group to have the permissions you
assigned to the group. For those one or two, you can create a user override
that assigns specific exceptions.