Access & roles

Who can see and do what — organisation-wide and per-project access, the role each person holds, and how to grant it without over-granting.