After you have enabled GAC, you can create roles for new user. Also, you can assign following permissions to these roles:
Permission Types
While creating a role type, you can give following permissions for the listed entities:
Permission Type
Description
ALL
This permission type grants all permissions for that user role. Selecting this option will automatically select all permissions.
VIEW TAB/LINK
This permission type enables the users under the user role to view the tab or link for that entity. For example, if you choose Manage Templates for Template for a user role, then the users of that role will be able to see Manage Template tab on the relevant page.
LIST & READ
This permission type controls various actions on the entity that may require read permission, for example, View, Search.
CREATE/DELETE
This permission type enables the user to create or delete an entity.
EDIT
This permission type enables the user to edit and manage notifications for an entity.
EXECUTE
This permission type enable the user to perform all executable actions for example, activating/deactivating a template or granting/revoking access.
Each permission type has list of actions a you can perform for that permission. Following table gives a detailed list of various actions you can undertake for each of the permission.