Each file has an owner, a group and read, write and execute permissions for the owner, the group and others. chmod and chown change them. The umask removes permissions from new files, and the setgid bit on a directory makes files created inside it inherit the group.
Example
chmod 640 secret.txt
chown alice:devs secret.txt