You can review and grant/deny GN4 objects permissions in many places in EdAdmin4 or Administrative Browser.

Here is the summary of links to the topics that describe the editing procedure:

Edit security scopes permissions

Edit config scope permissions

Users and groups permissions

Edit collection permissions

Permissions to unlock locked items

Edit folder permissions

Permissions on folders quota

Edit calendar permissions

User calendars permissions

Edit extract destination permissions

Edit typography permissions

Edit permanent colors permissions

Edit quick colors permissions

Edit title permissions

Edit edition permissions

Pages permissions

Workstates and pages permissions

Permissions on masters

Permisions on images, articles and text elements

Old version access permissions

Permissions related to cropping images

Permissions on object libraries and objects

Permissions on fonts and font layouts

Tags editing permissions

InDesign permissions

Permissions on scripts

Permissions to access applications/designers

Permissions  to access specific main tabs

Permissions to run multiple main tab instances

Permissions to run multiple application instances

Edit printing permissions

Edit publishing destination permissions

URL access restrictions

Edit permissions on TEMP folder