Who is signing in?
Access is scoped by role, not configured per user. A gatekeeper gets one screen and one job. A developer gets assurance and no controls. Nobody gets a permissions matrix.
Also on the platform
Pick any role and switch live from the sidebar. Locked modules stay visible with a padlock rather than disappearing — people should be able to see that a thing exists and that it is not theirs.