Permissions provide access to single features of applications, e.g. edit stories, use calendar, write blogs, etc.
Permissions are assigned to user roles, which, in turn, are assigned to the users. Only the Portal Master and some other manager roles can assign permissions to user roles.