Your team and what they can see
Permissions per person and per area, not one blunt admin switch.
Invite colleagues and choose which parts of the product each can reach — rent, leasing, maintenance, accounting, the board's work, and so on. Somebody who only handles maintenance does not need to be able to void a ledger entry.
A person with no restriction set can reach everything. That is different from a person with an empty list, who can reach nothing — the distinction is deliberate and shown as such on the screen.