If you already have ace groups set up then you just need to allow the groups access to each permission you wish to grant. The permission names are listed under the command dropdowns. If not, I’d advise reading this: Basic Aces & Principals overview/guide