Users, roles and access permissions

Give everyone on the team exactly as much access as they need. Build roles with fine-grained permissions for every module and action, restrict account visibility by group, and manage users centrally — with no risk of anyone seeing or changing something outside their remit.

Roles can also restrict account visibility by group, so a team at one site never sees another's money. Combined with the audit log and the platform's wider security, you know both who can do what — and who actually did it.