Often it is necessary to define multiple user groups within a company to define the different permissions and/or access rights to different groups of users.

Begin by defining the first user group with the most common privileges that will be used across all user groups.    Once this first user group is defined, the profile of this group can be replicated to the next user group defined. This second user group can build on the characteristics contained in the first user group with the addition of its own unique privileges.

For example, the first user group defined could be read-only to various common objects in the system and data access rights to common trading partners.  The second user group could be replicated from the first group but then have additional privileges added such as "Create" capability.   

The above process can be an enormous time saver.