SharePoint uses a role-based security model where permissions are assigned to users or groups at various levels, such as site, list, library, folder, or item level. Permissions can be inherited or uniquely defined. Common permission levels include Full Control, Edit, Contribute, and Read.