dotCMS includes a powerful permissioning system that enables system administrators to control user access to everything in the backend including content, structures, folders, pages, categories, files, - all dotCMS objects have permissioned access based upon the their own user roles.
dotCMS 1.9 introduces the idea of permission inheritance. If you set up your permission inheritance correctly, you can now basically hide the edit permission screen from your content contributors and not have to worry about permissioning each object individually.
Role permissions also define which backend tabs a user will be able to see when logging on to the backend. As a result, users with different roles will have a customized backend user experience and see only the tabs and dotCMS object that they need to work with. An example of a typical backend view for a "CMS Administrator" and a more limited "Content Contributor" are shown below. Backend permissions are completely customizable and access to backend tabs and objects can be configured/edited at any time.
Example of a Typical "CMS Administrator"'s View of the dotCMS Backend

Example of a Limited "Content Contributor"'s View of the dotCMS Backend

It is highly recommended that all Webmasters familiarize themselves with the following documentation sections before attempting sitewide Permissions setup for users or objects.