Every application that handles user data eventually hits the same problem: not all users should see the same things.
A junior nurse should not be able to access every patient record in the hospital. A contractor should not be able to read internal financial reports. An employee logged in from an unrecognized device at 2AM probably should not be editing production confi...