You can use Advanced Server Access groups and projects to control access to resources. You assign users to groups and groups to projects. Members of a group that's assigned to a project have access to that project's resources.
Groups - How to assign specific permissions to users in a group to control their actions when granted access to project resources.
Projects - How to use projects to define authorization scopes, by associating a collection of resources with a set of configurations to a project.