User groups within an organization

[brettatoms]

Where do we draw the line with permissions. Should groups restricted by plant collection, something simple like read, write and admin, a combination of the two.