For easier permission management, you can create named user groups from the
All User Groups page. You assign users to these groups from the
All Users page (see
Managing Users). Any application-level permissions can be assigned to an individual user group (see
Overview of Application-Level Permissions). The permissions are then granted to all members of this user group.
You can assign local users and LDAP users to your user groups. For LDAP users and groups, you define the permissions just like you would for local users.
To manage the user groups on the current site, you need the site-level permission
Manage Users and Groups. See also
Overview of Site-Level Permissions.