Access that matches the roles you have.
Set what each role can see and do per module, then override it for one person when you need to. Removed users are archived, so their history stays.
- A permission matrix per role
- Per-user overrides
- Archived users keep their history