Records can be set to either Public or Private security. These settings can be accessed via the Security link on the left side navigation pane of any record.

Public records automatically allow all AllRights users to view the record. Only limited-privilege users need to be added to view the record. Similarly, you must specifically add groups or users with AllRights to "Deny" in order to block these records from those users.

Public Record Security

Private records default to only let the record creator view the record. You must specifically add groups or users to Allow and select their Read, Update, and Delete permissions to make this record accessible.