Can I get an overview of how Splunk permissions work?

I want to set up an organized system of permissions so we can give the right access to the right data and the right Splunk features to the right analysts in my organization. Can I get a sketch of how permissions work in Splunk and where I can get info about how to set them up?