Tag
Salesforce access is spread across profiles, permission sets, roles, groups, and sharing rules. Before you can secure it, you have to be able to see it.