You group users in roles and define an account for each role with the least set of permissions.

• 应当将用户分组为各种角色,并为各个角色定义一个包含一组最少的权限的帐户。