the custom role has very limited permission to what records they can access, so the role diff gives me a lot of difference lol what kind of documentation should I be looking for?