"Can I give the rest of the firm access?" shouldn't be a hard question. Until now Admins and Members could both change almost everything, so every new seat was another way for the numbers to move.

Access Control separates working with the portfolio from changing what it is built on.

Roles: Members explore the portfolio with saved views, scheduled digests and Associate AI. Admins manage people, definitions and workspace defaults. Every person holds exactly one role.

Ledger: Holdings, transactions, funding rounds, valuations, cap tables and metric values are Admin-only. The numbers your reporting runs on cannot be changed by someone exploring.

Ownership: Saved views and digest schedules can be renamed or deleted only by the person who created them, or by an Admin. A teammate tidying up cannot take your view with them.

Restrictions: Where an action is blocked, the message names the role it needs and points to the Team page, so you know who to ask instead of guessing.