Features
Access stays scoped
Local accounts or OpenID Connect, repository memberships and role-aware queries keep each view permission-scoped.
In practice
Use local accounts or OpenID Connect for sign-in. Assign roles and repository memberships so each user sees the data their work requires.
Capabilities and limits
Provider OAuth connects repository data; it is separate from user sign-in. Alert access requires management permissions, and system administrators have broader access.
