Tim,

Have you looked at User Group permissions?