You can set the tool rights on the Tool Rights tab of the group account screen:

Alternatively, you can set the tool rights according to user on the Tool Rights tab of the user's account screen: