Yes. Viewing, creating, editing, deleting, approving, and reporting can be restricted by role. We design authorization around least privilege and record critical administrative actions.