Permission sets are used to grant additional access to users based on their functional or departmental needs.
Role hierarchy is used to grant access to records based on the user's position in the organization. Individual profiles are used to define the baseline access for users based on their license type and job function.

Using the Accounts with Opportunities report type is the best way to create a report of all Accounts with Opportunities. A report type defines the set of records and fields available to a report based on the relationships between a primary object and its related objects. The Accounts with Opportunities report type includes accounts that have at least one related opportunity, and allows fields from both objects to be displayed in the report. Using the Accounts report type would not work, because it would include accounts that do not have any related opportunities. Using the Opportunities report type would not work, because it would not include account fields in the report.

The last related activity date is a field on the contact object that shows the date of the most recent task or event related to the contact. This can be used to identify contacts that have had interactions with the company in the last year.

Creating a permission set that grants Edit access to leads and assigning it to the marketing managers is the best way to grant them the access they need, without affecting the other users on the marketing team profile.

The way that an end-user can access their personal settings is to click the profile icon in the header, then click Settings. This will open the Settings page, where the user can update their personal information, language and locale, email, display, security, and other settings. Clicking the gear icon in the header, then clicking Setup will open the Setup page, where the user can access the org-wide settings and features, but not their personal settings. Clicking the question mark icon in the header, then creating a Case will open the Help Center, where the user can get help and support, but not access their personal settings.