1. By status #
Here you give the permissions to a certain status. Users then have the permissions through their affiliation to this status.
2. By a group type #
Each group has a certain group type and you authorise its roles here. Users then receive the permissions through their role in a group of this type.
3. By a group #
Here you give the permissions directly to a group, also depending on the roles. The users then receive the permissions through their membership in exactly this group according to their role.
4. By a user #
Here you can give permissions directly to users. This should only be done in exceptional cases so that the overview is maintained.