Our platform has multiple user groups (Consultant, Administrator, Viewer, Employee, Manager, Auditor) Each user group has a default permission set, but each group is also customizable to the discretion of the super user. This way you can easily set what each user group can see and modify per main item (e.g. manual, dashboarding, workflows and forms).