How are permissions assigned for the request screen?

Summary:

How are permissions assigned for request screen? If assigned the role of Auditor, I know the user can see all transactions on the audit screen. Does this also mean they can see all requests in the requestor screen? How would you set permissions so that the user can only see the request specific to accounts, or the product view/viewpoint?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):