Hi,
for this type of access you can go with a role column in the users table and a roles table which contains the rights. You could also put your rights directly into the users table, that is of course up to you.
Now that you have your rights saved in the database, you can make use of Authorization - which can be achieved by the Gate Facade for example. https://laravel.com/docs/master/authorization
If you want to seperate your auth logic from the controller, you can define policies, which you can learn about in the link I posted - it works the exact way that you want it to be: You can decide which role can create, update, delete, ...