CampaignFoundations.com

As your admin user, and from the left menu, choose administer -> access control. Then select the "roles" tab at the top. Use this form and the Add Role button to create the following roles to which users may later be assigned: Campaign Team, Campaign Volunteers, Candidate, Site Editors. Feel free to create additional or different roles as you feel the need.

Next choose the Permissions tab. Grant your Candidate and Site Editors roles privileges to do everything you might want done on the site. Your admin user, user ID #1, is capable of doing everything, including granting or revoking privileges. Other users are limited by how this page is configured.

Under the node module, make sure every role can "access content". Under the story module, grant to all roles except anonymous user, the privilege of "create stories" and "edit your own stories". Consider granting to your campaign team the privileges necessary to "create pages" and "edit own pages" in the page module, and to "access statistics" in the statistics module.

Make sure you scroll to the bottom and submit this form with the "Save Permissions" button when you are through.

A principle of offering secure internet services is to grant only the privileges that are needed and no more.

Now that the roles have been outlined, your admin user can use administer -> users to edit the configuration of a particular user. Under the Roles: option, use checkboxes to assign users to roles.