This setting controls who can see records by default. Individual user permissions are granted through roles.