Access is granted by an administrator. A new sign-up sees nothing until a role is assigned.