Choose which folders these people can open, then set what they are allowed to do in each one. Change any of it later from org controls.
Nothing here can be shared yet