Access control lets developers define what actions can be performed by each entity (human or digital).

OCAPs (Object Capabilities)* or RBAC (Role-based access control).

* https://blog.ceramic.network/capability-based-data-security-on-ceramic/