Company context, group access, shared user accounts and record scopes.
How roles and permissions work in COS (what you can see and do).