The concept of creating user groups with specific permissions, rather than assigning individual permissions.