Ultimately, what I want is to have a bunch of users, all in group Finance who are able to view and edit passwords that are in the Finance resource group.

Each finance user should be the owner of a subset of those resources.   If I am doing all the importing as a superadmin user, is there some way I can set the ownership of a group of records during the import?

Also, is there some way to enforce sharing out any resources created by someone in the Finance group to the entire group?   Otherwise, how do I ensure that the finance manager can see all the resources created by anyone in her group?   I can't simply make her a superadmin because then she would be able to see ALL resources in PMP-- not just those in the Finance group.

any advice on how this sort of distributed arrangement should be set up?

thanks in advance