You can apply or edit permissions to control access to resources for non-administrative users.
Users can be affiliated with more than one group. If a user belongs to multiple groups, their permissions are a union of the groups with the highest permission level being used.