NAV 2013 - Permissions

I am looking at Security (Permissions) in NAV 2013. Can i get a list of objects that each user interacts with, like an audit trail, or is there another way of doing it? We’ve found some of our users are running with greater privileges than i want, so i need to lock it down more.

Does anyone have any advice on how best to handle security?