The repository administrator is responsible for setting up the repository, and for controlling access to the documents stored within it.
Access can be controlled in the following two ways:
User and group rights – provide global levels of access, which allow the user to view the repository and have a default level of control over various kinds of objects within it. You can also standardize the provision of user rights by creating groups. See Controlling Rights for Repository Users and Groups
Document and folder permissions – provide access to individual documents, or to the contents of folders. See Controlling Permissions for Repository Items