User permissions

How to properly set up access, permissions, and policies