Not everyone needs to see everything. A salesperson needs different information from a warehouse worker or a bookkeeper.
Per screenWith roles you decide who sees which part of Lean: sales, purchasing, planning, invoicing.
Per tabWithin a file, tabs can be shielded, for example the financial data.
Per fileWhere needed, you restrict access to certain files.
Reports per roleWhich reports someone may open also depends on their role.