Shared Access Controls

Use this page to manage explicit app access, supported roles, and feature flags without writing SQL. Authenticated employees remain default `viewer` users unless you create elevated access rows.