To configure access rights, you must define the groups. It is important that the groups are representative of the work functions of the business rather than employees.
To create a group, go to the menu Administration >> User Management >> Groups .
A group has more information:
The field Restricted is important because it defines how are managed the group permissions:
Permission
For a given, only a permission object group is possible.