Among users you can create the necessary definitions to define different user roles. In this way you can only define the authorizations for each user of the system which are necessary to him.
The definition of a user of the system (providing a user name, password, user role) you perform in the screen employees.
So you assign a user role to a user in the employee screen.
A user role contains the possible actions (action profile) which this user may perform and the possible data (data profile) which this user may see.
Hence the following data can be configured for users:
•Data profiles
•Action profiles
•User roles