Users can be created in the following way - we recommend inserting the following post-signup.
Users can be granted permissions for a certain resource object - this should be done anytime a user is granted access to a set of resources
vc.users.grant_action('user_id', 'action', 'resource_object_id', 'resource_type')
You can use
VistaClient.ALL in place where resource_id or resource_type is accepted to indicate all.