Approve new sign-ins, set per-app roles, manage admins.
Normal users only see apps set to view, editor, or admin. None hides the app.