Two Layers of Permissions
Permissions are enforced in two places: on the server for every action, and in the interface, which hides pages and buttons a user is not allowed to use. This means people only see what they are permitted to do.
Read-Only Access
Some permissions are view-only. Where a user can see a page but not change it, inputs and action buttons are disabled, giving safe read-only access.
Role-Based Visibility
What each person sees - navigation items, buttons and whole pages - depends on their role. Administrators see everything; other roles see the subset relevant to them.
Permission Errors
If someone tries to do something they are not allowed to, Pipeline shows an "Access Denied" message rather than performing the action. If a teammate is missing access they need, an administrator can adjust their role.
Dashboard Defaults by Role
Administrators can set default dashboard layouts per role, so each type of user starts with a sensible dashboard. See "Customising Your Dashboard".