To configure documents access permissions, open any CRM element and click Documents > Add new template.
Click the cogwheel button > Access permissions.
Add a user/department/group you want to configure access permissions for by clicking Add access permission.
Click Add to add a new role.
Specify role name and configure actions available to this role.
Click Save and assign this role to the added user.