After creating the configuration information tree, modify the policy of the CT and user that are allocated to groups as needed.
The following are two ways to modify policy:
The system administrator modifies the policy.
Set a department administrator to be responsible for modification of policy for the group that he or she manages.