Create roles and set permissions

Create a role

Sign in as an owner or admin and open Settings → System Settings → Roles.
Select an existing role that is close to what your team needs.
Select New role, enter a name, and select Create from followed by the selected role name.
Review the copied permissions before assigning the new role.

Set permissions

Select the role and expand the relevant module. Set the allowed actions for each function. Where a record scope is available, choose between assigned records and All records. Turn off View to switch off the entire function. Select Save. Locked roles appear without an editable save action.

Assign and verify

Under People, open the person's actions and choose Change Role. Select the new role and confirm. Ask the person to sign in and check that they can perform their normal work and see the intended records. For an exception that applies to one person, use Change Access.