Yes but you can also do it for more major permission additions. As per the guide, everyone should have Registered as their Primary group and this should be set with the lowest permissions that you want everyone to have. You then create multiple groups with different permissions sets and allocate one or more of these to users as Secondary groups depending on how many extra permissions you want them to have.