I've created a user and added them to the Administration / Access Rights group. This group has an Access Control that grants full read/write/create access to the Companies object. However, this user receives the following error when attempting to save a newly-created company:

Access Denied

The requested operation cannot be completed due to security restrictions. Please contact your system administrator.

(Document type: Companies, Operation: read)

Furthermore, companies created by the admin user do not show up when the new user views the list of companies. Can anyone explain if I am doing something wrong? I would like this new user to be able to create and view companies.