Check a box to grant that dashboard, uncheck to revoke — changes save immediately. Staff accounts always have everything (manage staff in Django admin). Legacy all-access admins (granted through the old admin-request flow) show all three checked; narrowing one converts them to per-dashboard access.