Grant permission for an action to a subject, which can be either a user or a group.

Add a user or group to an existing permission group.