Check out the Security and Visibility Admin Configuration Kit for prompts on security settings, object-level security, field-level security, and record access.