We're working on some user permission controls and the ability to lock things down better. You would be able to manage "Roles" on the "Users" page. Each user would be assigned to a (single) specific role. The workspace "Owner" would have irrevocable full access.

When adding a new Role you would be able to customize permissions:

Here's a list of permissions we're planning to add:
Any input is welcome.
hide cost related fields so you can share outside of organization
customize multiple sets permissions within the same role