User rights in XI 3.x
I’d never really considered doing this when working with user rights in an Enterprise environment, but now that I’m thinking about it, it does make sense.
When setting security for a single user, a best practice is to create a group first, then apply the desired security rights to the group and add the user to that group. Rather than applying rights to individual users each time a new user requires the same privileges, the administrator can simply add them to the group, thus saving administrative time.
It seems like good practice, even if you never add another person to the group, because it becomes much more transparent which rights are applied to who – in comparison with applying the rights to a single user.