Assigning rights for a user can be done directly for a specific user or by assigning a role with specific rights.