Here is our scenario:
1) There are multiple technicians. Each technician should only see his activities
2) There is a manager for the technicians who should see all activities of all technicians.
3) There are multiple sales people. Each sales person should only see his activities
4) There is one sales manager who should see all activities of all sales people.
1) and 3) are easy by giving them "User" level access rights. The problem I am running into is with 2) and 4). I can give them "Business Unit" level access. However, now the manager for the technicians sees ALL activities including the ones from the sales team. Is there a way to define access on a "Manager" level, i.e. the manager sees only the records of the users reporting to him but not others?