Each user is tied to a service and a role that determines which screens they can reach. Actions are logged and queries tracked by user, so it’s possible to trace who viewed or changed what.