Authorization rules are set per team (Management, Investment, IR). Each team member inherits their team's access level. Per-tool overrides available when needed.