Authority decided by the server, never by the screen.
Corporate, manager and staff responsibilities use distinct role, property and operational-area scope. Technical and security review forms part of any proposed pilot.