If you are a global administrator, you can create permission sets for user accounts.
Click Menu → User Management → Permission Sets.
Click Actions → New permission Set.
Enter a unique name for the permission set.
To immediately assign specific users to this permission set, select their user names in the Users section.
To map all users in a specific Directory Server group to this permission set, select the server from the drop-down list, then click Add.
Click Save to create the permission set.