You can enable or disable a permission for a group, such as the capability to create personal dashboards, or set a preference such as the maximum number of objects displayed per page in a worksheet.
You can disable permissions that you cannot restrict with security role assignment, such as adding labels or comments.