A user's permissions are defined by a combination of which Permission Groups they're associated with and their individual permissions. Permission Groups and Users can be added/modified/removed via the Admin section on the main sidebar to the left of NiTO's dashboard.