Some of the user permissions can be set at the group level. For example, only members of the Administrators group will have permission to edit *any* file.