You can review and grant/deny GN4 objects permissions in many places in EdAdmin4 or Administrative Browser.

See Granting objects permissions (links) for the links to details.