There’s a number of ways you can manage groups and profiles within the CRM

a.     Go to Setup > Security Control > Profiles

b.     Click the +New Profile

c.     In the Create New Profile page

                                               i.     Enter a name for the profile

                                             ii.     Click the +New Profile and choose a profile to clone

                                           iii.     Add a description

                                            iv.     Click on Create

d.     Within the profile you can select or deselect access and/or nominate actions allowed for profile

                                               i.     View

                                             ii.     Create

                                           iii.     Edit

                                            iv.     Delete

                                             v.     Share

2.     Manage Roles

a.     Users with a CEO role have access to all records

b.     Managers cannot view or edit subordinate’s records unless they have read/write permissions

c.     Users at a higher level in the hierarchy can view other Users data below their hierarchy

d.     Users of the same role cannot view each other’s data

e.     Using the Share Data with Peers option you can enable sharing of data among Users of the same role

3.     Data Sharing

a.     By default, all Modules have a Private option

b.     If permission is Public Read/Write/Delete everyone can access and update all the Users data

c.     Is set to Read Only, everyone can only view other Users records

d.     If set to Private, Role Hierarchy and Sharing Rules can be applied