User Access - Security Set-up Questions

some questions regarding User Security Access when setting up an HR Admin User’s Security Policy:

1. I assume, if I do not “check” a box for the security feature, it will not even show up for the HR Admin User – correct. Example: BenAdmin: in the column “Partner/Broker Users” appears – for an HR Admin User, I did not check the box.
2. Zip Tables: The very first one that appears, has an orange box indicating that it is “global”, I assume that I should not check this box because I do not want my HR Admin User to have any type of system global access to information – correct?
3. Change Password: has a blue box, which indicates that it is Global, Company and Employee Level. This one has me baffled – I want the HR Admin user to have the ability to change their password and passwords on behalf of their employees, however, would never want them to be able to change “global” passwords. How and/or where can I set this up? I don’t see the “Change Password” appear at the “company” level?
4. Schedule Reports – this has an box indicating that it is “global”, I want the HR Admin to have the ability to schedule reports, but only for their company, not globally? Do I complete it as if it were just at the company level. Should I assume that an HR Admin ONLY has access to their own group and therefore, when I see the words “global” I should assume that means just for their company?
5. Security: Appears twice: once with an orange (global) box and once with a purple (company level) box. If what I stated above is accuract, then should I not check the first security box and only check the second security box? Does it matter?
6. Dashboard Configuration: Again, it is orange (global) – I assume though, they could only change their company dashboard information?
7. What is Logout at the company level? What feature does that control? What does it do?