Define the default over-budget permissions for user groups. You can change these settings for specific budget control rules ...