I needed help finding where to control which tabs each user role can access. It was not obvious that role permissions are managed separately under settings and user management.