Any user being able to alter the data model is just a fundamental design flaw. Other than that, I'd expect segment-based permissions (sales team/territory etc)

Any user being able to alter the data model is just a fundamental design flaw. Other than that, I'd expect segment-based permissions (sales team/territory etc) as a minimum.