Group users based on their role in the business - then define what they can and can't access.

• Put users into "Role" groupings.
• Control access (using roles) on a project by project basis.
• Encrypt sensitive files.