Layer 1 (SharePoint) controls who can read and write list items. Layer 2 (app roles) gates navigation areas such as Ticket Overview, reports, settings tabs, and ticket actions like internal notes or delete.
- Assign users to built-in or custom roles under Settings → Roles & Permissions.
- Toggle features per role in the permission matrix.
- Members may be restricted to view-own tickets only.