Now, we pivot from viewing permission to actual action permissions. It is possible, using Profiles, to even bar entire modules from some people.
Under Settings > Users and Control > Security Control, then click on Profiles. When you click into a specific profile (the defaults are Admin and Standard, but you can create more), you can configure ALL the permission.
But always remember, with great power comes great responsibility.