Security is based on user Roles and Groups. A User interface is offered to define Roles. Once roles are defined, it is as simple as using Facebook allow or disallow list for any user. Defining roles required Administrator Role and skills.