I have writing blogs on this. Have you got any chance to check here
BusinessObjects Administration - Setting up security model – An easy way to configure and manage
BusinessObjects Administration - Setting up security model – Part II
BusinessObjects Administration - Setting up security model – Part III