Grant permission for an action to a subject, which can be either a user or a group.
Copy all of subject's permissions to target. Subject and target can be either users or groups.
Add a user or group to an existing permission group.
Note that Subject or Group names can't be all upper-case, as that is reserved for permission names.