Administration module.
Select a leaf in the tree on the left by clicking it, then select which users or groups are allowed to access the corresponding sub-module.