Account Administrators can change permissions for any contacts in their account. Please Note: Account admins have access to everything, so their permissions cannot be altered.
In order to change a user's permissions, open their contact record and click the "Permissions" button on the left.