How to Create a Permission Rule
Click Add a user or group rule, select Group, enter search text , and then select a name from the list. Select a permission role template to apply an initial set of capabilities for the group. Click a capability to set it to Allowed or Denied, or leave it Unspecified. Click Save when you are done.
Whether a user can set permissions is based on their site role and how their Set Permissionscapability is set.