Yes. Admins can set up groups and assign users to each group(s). Each group may or may not have specific permissions that the admin also controls.