instead of deleting users at my old job, we would just set them as 'inactive' so that if that person was ever rehired for the same position, then they would have the same resources to whatever groups they were assigned to before. If that person was to get a different job for the company, it was a simple matter of moving them around in groups.

Most of the time it is easier in the long run to set up groups for permissions and put users in groups rather than assign each user specified permissions. It is also safer since it will take less time to move users out of groups rather than have to look at each folder that you had set permissions to for each user.

enjoy

~Halv