User Groups and Access Permissions
User accounts and passwords.
User groups and subgroups.
Access permissions on per collection or per document basis via Rights attribute: Read, Write, Unlink (delete).
Blurred distinction: users -> authors.