Then, to keep it as simple as possible, you would be adding YesNo fields for those rights to the user table. Adding those fields to the user management form so they can be ticked unticked for users by the administrator.
Then in the form load event of the main form check whether the current users Id has each right and set the enabled or visibility property of each button accordingly. Something like:
On the demo John linked to you'll see there is already a permissions field "DBAdmin" and that is used on the dashboard in just that way:
Code:
Private Sub Form_Load()
Me.pagAdmin.Visible = DBAdmin()
End Sub
Public Function DBAdmin() As Boolean
DBAdmin = Nz(DLookup("DBAdmin", "tblUsers", "ID = " & UserID), False)
End Function