Access Groups are optional for larger teams. In the current version a group grants only the right to view Artists and Releases; it does not allow uploading, publishing, using connected accounts, viewing finance or managing people.
To grant additional individual permissions, use Edit permissions for the employee. Removing a member from a group or deleting a group removes its shared catalog-view grant on the next protected request.