Default permissions can be set globally for all users for a product area, or for individual user groups within an area. By default, a product areas' permissions are not enabled for any user or group (except for the admin user which has all permissions for all role types granted). Use the Default Permissions tab to set default permissions, for both the groups you create and those shipped with the product.
Users added to a group inherit the group's default permissions.