Folders — Give someone a whole folder
Open Permissions, pick a person, and set their access on the Folder access card. One setting covers every table in that folder — so “the contractor gets the Acme folder” is a single action rather than one grant per table.
A table's own override always wins over its folder's, so a deliberate per-table decision is never quietly overruled by a broader one.