The five permissions common to the entire department should be bundled into a permission set group. Salesforce defines permission set groups as a mechanism for combining multiple permission sets around a job persona or role, simplifying assignment and ongoing maintenance. Users assigned to the group receive the combined permissions from its component permission sets. Higher-level staff can then receive the same permission set group plus additional individual permission sets that represent their extra responsibilities. This avoids repeatedly assigning the same five permission sets one-by-one and supports least-privilege access. Data Import Wizard is not the standard administration mechanism for permission-set assignments, and Data Loader is unnecessary for the described configuration. The Manage Assignments approach with a permission set group plus individual exceptions provides the cleanest scalable permissions model.

================