Is it generally recommended to use user groups for controlling Collaborative Space access/permissions? In the past I have only seen users given access to collaborative spaces on an individual user basis, but I am setting up a new collaborative space from scratch and am considering using user groups to control access instead. I have mostly worked with on premise installations that have been around for many years and I think giving individual users access was the only option "back in the day". I see pros and cons of using both methods.

Individual user access:
Pros:

• What you see is what you get
• Users will not get assigned redundant roles

Cons:

• New users will need access updates in multiple places

User groups:

Pros:

• Users only get assigned to 1 or a few user groups that have multiple purposes

Cons:

• It may not be clear what permissions a user group is giving
• Users may be assigned redundant roles e.g. a manager may be in a group that gives leader access as well as author access.

So what are other people using?