Legistar classifies users into security groups, and establishes profiles of data and program access for each group. Administrators assign each user to a security group, and the user inherits all the data and program access permissions of his or her group.