1. Individual users只能set up自己的个人账号，admin可以从User Management为其他用户set up个人账号（右上角下拉菜单中选Admin）
2. Securitly Groups：define groups of users with particular access rights defined by the roles attached to the group
Roles: define access rights
3. setting up groups步骤
a) create group + add users to the group
b) create a role to each group (set access level) from Role Management ==>Create Role
c) add the group to record (Mass Assign)
4. 在create role的过程中，chilck on column heading可以编辑一整列的权限，其中:
Access可选择 enabled与disabled
Delete/Edit/Export/Import/List/Mass Update/View可选择group、owner与none
group: access to all records assigned to member of the same group
owner: access only to their own records
none: not have access
5. Security Suite Settings
additive rights与strict rights个人理解为对具有多重身份的用户的处理，前者选取不同身份中所获得的最高权限，后者的权限由最近assign的group决定（If a user is a member of several groups only the respective rights from the group assigned to the current record are used）
User Role Precedence: If any role is assigned directly to a user that role should take precedence over any group roles.
Filter User List: Non-admin users can only assign records to users who are in the same group(s).
出现的问题
1）cases的权限打开了，但create cases的时候在搜索account name的时候显示没有权限
解决方法：同时打开account的权限