The ACL group defines which access privileges your client have.
You can set a default ACL group on the product configuration page. This group will be used for new created accounts.
You can override the default ACL group on the client product page to set individual permissions.