Use Google Groups

rather than setting permission at the user lever it makes things easier to have dedicated user groups for different department, teams etc and use these google groups to setup the permission if a group has permissions on documents, drives, spaces or even space groups, adding (or removing) a user to the google group will update the permission this user has on these documents, spaces or space groups