User
An RT user is identified by their e-mail address.
A user with the Let this user access RT attribute (known as "unprivileged users") can use the SelfService web interface to see Tickets they raised and their full history.
Staff (formerly known as "privileged users") have the Let this user be granted rights attribute and can access the full web interface to modify Tickets.
A user can have Rights.
A user can be a member of a Group.
A user with the global user right SuperUser can do anything.