Grant permission for an action to a subject, which can be either a user or a group.
Add a user or group to an existing permission group.
Note that Subject or Group names can't be all upper-case, as that is reserved for permission names.