I posed those questions only as examples of how user interaction might be limited. You need to figure out limitations you want to enforce and design for that. For instance, the HR Manager only needs to see Employees data so when that user opens database code can grab network USERNAME and lookup the user in Employees table and open a form for entering/editing employee data. Or maybe the same main menu everyone sees but in the case of the HR Manager only buttons to open employee forms or reports or a submenu is available (but not available for other users). There are many ways to approach this.