- Built-in groups - Add a new group - Inherited permissions - Permissions (Allow, Deny, Not set) - Security and permissions in all azure subsystems (Boards, repos, artifacts, pipelines, wiki, dashboards, ..)