First of all you need to analyze carefully which different user roles you want to implement. You should e.g. set up an excel sheet that contains all relevant information. This will serve for later documentation as well. Analysis is necessary otherwise it will not be possible to set up and maintain efficiently your SynerGIS User Management rights repository.
In order to be able to minimize administrative work you should make use of a multi-level access rights approach: From course grained control towards fine grained rights control. This way you will be able to implement your needs with a minimum of work and time.

Levels of access control
In the subsequent chapters you will find the different access rights levels to be used for your role definitions.