Access control to data

Source
....

Group permissions and Full Control
You may find it easier to assign permissions to groups rather than to individual users—this saves you from having to maintain access control for each user. You can also allow a group (or individual) full access to the file or folder, rather than selecting individual types of access permissions. To do this, select the Full Control option when setting permissions. Then, you can just select Deny for any type of access you want to exclude for the group (or individual).
The type of permissions you can grant depends on the type of object. For example, the permissions for a file are different from those for a registry key. Some types of permissions are common, including:

•	Read permissions
•	Modify permissions
•	Change owner
•	Delete

....