Access follows role-based permissions. Admins and HR typically manage documents; managers and employees see only what their role allows.