changing group permissions

I’m trying to figure out how to change the permissions on either the user group or the power user group. I need the users to be able to run legacy apps. If I give them power user rights, they can install legacy apps as well as run them. I either need to change the power user group to be able to run but not install legacy apps or setup the user group to be able to run them.

Thanx