Access control is one of Payload's killer features. It delivers a ton of power and flexibility, especially compared to other CMS' rigid RBAC patterns.
Payload's admin UI automatically responds to the access control that you define. For example, if a user can't edit a document, the "Publish" button will be automatically removed. If a user can't edit a field, the field is automatically set to read-only in the admin UI. If a user can't create new documents in a collection, the "Create New" function will be disabled throughout all of the admin UI.
In this video, we'll go over an overview of Access Control using the open-source demo repo linked to below. It demonstrates how to set up a "multi-tenant" style infrastructure among many other things.
Codebase shown in vid:
https://github.com/payloadcms/access-control-demo
Access Control docs:
https://payloadcms.com/docs/access-control/overview
