To simplify the administration process, you should always assign permissions to ____ rather than to individuals