The way Salesforce works with Permissions is somewhat confusing! A combination of Profiles, Roles, Sharing Rules, Permission Sets and Manual Sharing make it hard to understand what’s going on.
I created this diagram to help people understand how Salesforce Permissions work.