Use user status to assign permissions to users.
User status represents a user group. Each user status can have a specific set of privileges. User groups have a hierarchical structure (a subordinated user group cannot have more privileges than a parent user status). A user can be included in several different groups and the user status set can be different for different projects.