I would advise to follow this learning path: https://academy.mendix.com/link/path/37/Configure-Security-and-Access-Management
Regards,
Ronald