I know the permission of Xenforo is set by adding all group permissions together (i.e. YES + NO = YES).  But is it a good idea to simply set all permissions for admin group to YES?  Maybe there are some exceptions, then set it to NO.
Is it a good practice?