Defining access rights on the level of a shared workspace is essential for creating a workspace that is easy to use, effective and secure. The access rights defined at this level are applied (by default) to all folders, documents, etc. in this workspace. It is usually not necessary to modify the access rights at the level of individual objects if they are set appropriately for the workspace.
Section 4.5 Access rights and roles describes how to define roles and thereby assign differentiated access rights to members of a shared workspace.