Permissions are granted per user and enforced everywhere — the same rules apply in the interface and behind it.

Common shapes

• Sales — inquiries, proposals, contracts.
• Kitchen — event orders, catalog, allergens.
• Finance — invoices, payments, accounting sync.
• Owner — all of the above, plus settings and billing.

Start narrow. Widening access later is a one-click change; un-seeing data is not.