About configuring security policies
After you have determined your security strategy, you configure and/or create the appropriate security policies and roles and then specify to which users the people with those roles can assign project roles and access levels.
Editing the Global security policy
Creating new security policies
Configuring the user visibility option for security roles