From this tab you can assign the roles which will have the option to access records across modules. Select the roles you want to give access to in the second column. If the role is not mapped as Initiator or Approver then the access will be to only view in process or completed records. Draft records created by a user cannot be viewed by anyone else (in general).