Adding users to sites and sub sites

What is the best practice when it comes to giving permission to user for
different groups in Sharepoint. Should users be added to a site individually
using domain\username?

OR

Should we first create AD groups of users and then add AD groups to Sharepoint
groups for a site? Group A is added as a Reader to site while group B is added
as a contributor?

Let me know.

Thanks.