Customization activities include adding users to user groups, maintaining user-defined fields, configuring user access privileges.
See Fields and Lists, Permissions, and Risk-based Quality Management.