Access Levels: Levels group permissions together. Built-in levels: viewer (read-only), researcher (submit jobs), lead (approve requests), admin (full access). Higher priority levels take precedence. Assign resource rules to levels to control which configs, hardware, or providers users can access.