From the User Permissions tab the ' arewedoing settings can be accessed, you can decide which applications users can access as well as to which sub-organization they belong to and any role that will be assigned to them.
The users always will always have access to at least the applications’ s home screen.