Using the Group Manager, IT Admins can define and edit custom permission groups for email accounts and services with a great degree of granularity.
You can assign each user's account the User and/or IT Admin roles. Each role has a default set of permission Groups, based on the services your account is subscribed to. You can change any user's default permissions by selecting a custom set of Permission Groups. You can also create your own Permission Groups and define a custom set of permissions for each.
You can also get to the Group Manager from any user's Groups page.
The Group Manager lists the built-in groups available to your account, as well as any custom groups you have already defined. Click Details to view the current settings for a group.
Click New Group to create a new custom permission group. That takes you to the "Create New Group" page. You can assign permissions for the account and for each available email service.
Enter a name for the group and an optional description.
On the Account Tab, specify what the group can manage for all of the domains associated with the account (Global Scope) as well as for each domain (Per-Domain Scope). You can optionally select to which domains the per-domain permissions apply.
There is also a tab for each of your hosted email services that have permission settings. Click on each one to edit the Global and Per-Domain settings.