website/docs: rewrite section about users and perms

website/docs/users-sources/user/user_basic_operations.md

@@ -79,9 +79,11 @@ After the creation of the user, you can edit any parameter defined during the cr
 
 To modify a user object, go to **Directory** > **Users**, and click the edit icon beside the name. You can also go into [user details](#view-user-details), and click **Edit**.
 
-## Assign, modify, or remove permissions for a user
+## Manage user permissions
 
-You can grant a user specific global or object-level permissions. Alternatively, you can add a user to a group that has the appropriate permissions, and the user inherits all of the group's permissions.
+You cannot grant a user any permissions. Instead, either assign the user to a role with the appropriate permissions, or add a user to a group that has the appropriate permissions (via the group's role).
+
+You can however grant _object_ permissions on a user, meaning you can define what permissions any specific role has on that user object (what can be done TO that user object, not by that user).
 
 For more information, review ["Permissions"](../access-control/permissions.md).