Master data (contacts, products, ...) and transactions can optionally have three authorization types:
Owner - can delete (is also editor, reader)
Editor - can edit (is also reader)
Reader - can find and read
When saving tasks, contacts, etc., the access rights are activated.
All members who are not members of these rights do not see any such action.
The assignment of rights takes place during the creation therefore the respective employee must be a member of one of the groups with "access rights". So these rights are given to the respective process, contact, etc. Basically, the department is a "virtual space". They create document spaces within which access to information is permitted. The key to these rooms is distributed by the respective membership. If an operation is passed on manually for processing, the necessary access is automatically activated.
Establishment departments
Create departments with these names. Then enter the access rights as shown on the right
Employees internally owner rights
Employees internally editing rights
Staff internally reading rights
ATTENTION "You can only select a department if it has members, ie if it is assigned to this employee. "
In the process already stored, the assigned rights can be displayed via the additional menu.