Employee groups can be used to apply permissions to groups of employees. Employees can be a part of multiple groups, as well, so you can make permissions as broad or as granular as you need.