To assign a user to this role, search for the user and then assign them the role.
{{notes}}
Every object instance (ie a invoice) has a unique global ID (GUID). If you want to allow only access to object instances where the GUID is known then set GUID Required. eg you want to share an invoice with a user, but only if they know the GUID.
By default all data is accessible to any user that has functional access to it.
To restrict access to specific object data use SETUP_ROLE_OBJECT_ACCESS_MANAGE.