Use group permissions wherever possible.
Why?
1. Managing individuals is a lot easier when all you have to do is make them a group member. When people change roles you just plop them in a different group.
2. In three years you aren’t going to remember what specific privilege gives a person the right to do something, and it will cost you at least two hours of messing around.
3. The group name can be descriptive so you can tell exactly what it is for, not just that Susie Q. Person has a particular privilege.
And if you start using a group for more than one thing, update the description so it’s obvious.
