I have been trying to figure out how to set security for each user on HansaWorld, but can't seem to get it right. Previously settings, under Person->Start Access Level = Full Access. Full Access seems to allow users to use almost all the module. If I set Start Access Level = No Access, and use Access Groups to control the modules, there are some Actions like editing a Contact that cannot be done.

What is the best practice for security on HansaWorld? Is there a specific manual on security?