If you are a global administrator, you can create permission sets for user accounts.
Click → → .
Click → .
Enter a unique name for the permission set.
To immediately assign specific users to this permission set, select their user names in the Users section.
To map all users in a specific Directory Server group to this permission set, select the server from the drop-down list, then click Add.
Click Save to create the permission set.