Fine-grained access control using tags, groups, and auto-approvers.