Hello Kim:
What are you trying to accomplish?
If you or Debbie access Invoices as the SYS user, you will have full access to adjust users' rights. In particular, you use the Group Setup option to define Group(s). Each Group will have its own set of functions that you allow it to perform. Then you go to the User Setup option to link each User with the appropriate Group.
For instance, you could have a "Clerical" Group who can only do certain things and a "Mgmt" group that is allowed to do more. Then you edit User 1 and indicate which Group defines their capabilities. Then User 2 and so on.
You might want to consider these changes in co-ordination with setting up security on all modules.