...
To implement these levels, organizations select specific groups within the native system with the required permissions and map the IAM Shop Permission Levels to those groups. Users who are members of these groups receive the specified access during their sessions. For example, if a group has read and write permissions on a database, a member initiating a PSM session will automatically receive these permissions.
...