Have Vault automatically assign a permissions group when an email is associated to Vault.
Example: We have a global 'read/only' group that we would like to automatically be assigned when an email is associated.
All users receive read/only at minimum, then additional permission groups are associated to grant additional permissions.