Users can be created as different user types which limit access to different functions. For example, a marketer may be able to extra sales team's contact records and launch campaign only but may not be allowed to read anyone's sales forecasts nor any opportunity details.
Supervisors and Subordinates
User hierarchy can be configured in the platform. Supervisors may be setup to have READ and WRITE access but not DELETE permission on their subordinates' data. This allows data sharing while minimizes risk of accidental or intentional data removal.