Access rights can be configured per module using the access overview. The overview is accessible via the tools menu.

In the access overview, the read and write permissions are displayed for basic and for individual module. One or more groups may be assigned via the edit button on the right. There is a difference between the dialogue of basic module such as processes and the legacy module (audits, internal projects, protocols, risks) and the configuration of individual module. Which category is involved can be seen via the module Category column. 

For basic module, the configuration can be done at any time, the changes are active immediately.  

For individual module, the module Generator configuration opens, and the changes must be published by updating the module .