Create a role and pick/choose what permissions each one can have.