1. A computer implemented method for providing permissions to users in an on-demand service environment, the method comprising: receiving, at a server, criteria; selecting, at the server, a permission set associated with a grouping of permissions indicating accessibility of a component of a system, the permission set associated with at least one of the criteria; identifying, at the server, one or more of the users as being associated with the at least one criteria; assigning the permission set to the one or more users; and storing data indicating the assignment of the permission set on one or more storage mediums.