Please forgive if this is a stupid question, but I am an IT guy trying to help out the Accounting department on moving to Netsuite. We have setup a role for our basic employees. We gave that role no permissions to the "documents and files." Because of this, they cannot use the phone app to create expense reports. However, when we give them the Create permissions on "Documents and Files," they are able to create and submit the expense reports, but they are also able to go into the file cabinet and view files in the "images" folder which apparently holds all of the uploads for expenses. Is there a better way to do this so we can avoid having employees go in and see other employees "images?"