When you need control over your users to the detail, a role-based permission strategy is a proven solution that this plugin handles effectively. Create roles and assign a granular level of permissions to them. Then simply link the roles to users.
Your app has features that not all users are allowed to access. Structure your permissions that go hand in hand with user roles.
Expose admin areas by users’ roles & group affiliations.
Grant rights at the menu level and dig further down at the context level to create meaningful roles that are in control.