Access Level 1 (Group 1)
protected resources - music, games
users - bob
Access Level 2 (Group 2)
protected resources - music, games, applications
users - mike, bob
Access Level 3 (Group 3)
protected resources - music, games, movies, applications
users - joe, bob, mike
How to get this scenario implemented, step-by-step:
0. i guess you already have accounts joe, bob and mike
1. create 3 accounts: level1/2/3
2. protect them by assigning an impossible password
3. in account level2: link level1
4. in account level3: link level2
5. restrict music,games to level1
6. restrict applications to level2
7. restrict movies to level3
8. in account bob: link level1
9. in account mike: link level2
10. in account joe: link level3