permdefs

Permdefs contain information about permission manipulations to be done, they are defined in the permdefs section of the configuration.

permdefs:
  # mydef is the name of the permdef, which will be used for linking it to regions.
  mydef:
    # Filter permission: a player must have this to be affected by this permdef.
    filter-perm: rsp.filter.test
    # ignore permission: Players who have this will not be affected by this permdef.
    ignore-perm: rsp.ignore.test
    priority: 0
    have-inside:
      groups:
      - SomePermisisonGroup
      - SomeOtherPermissionGroup

The entries are not obligatory, if no filter permission is given the permdef applies to all players, priority defaults to 0. Instead of have-inside you can also use add-enter, remove-enter, add-exit, remove-exit, (have-outside), if you know what you are doing.
"have-inside" is currently implemented equivalent to add-enter+remove-exit, similarly with "have-outside". That is subject to change, probably there will be a technical solution or different priorities for adding / removing.