We have multiple teams using our CRM, there are common contact and account records, but documents that we want only the owning team members to be able to access. The only way that I can think of achieving this is to create security roles for specific teams and then restrict them to reading only their business units document location and records. Records would be housed in SharePoint online. Will that work? Thanks!