Yup. I suggest a group because then you can add/remove users from that group without having to remember the person(s) that should get the access. AccessLevels is a good call to dial in what exactly the person should be able to do - once the can access an object. Finally, you may want to use a layou...