For instance, all users have the right to archive records. If you want to restrict the ability to archive records to only certain users you can do so by removing the new group to the users.