To facilitate the role-based access, you should create a list grouping the IT entities in Projects and Partner-specific entities in Networks. For example, you create two custom roles with access to projects:
Custom Role
Base Role
Project Access
Network Access
User 1
IT User
Project_123
All Networks
User 2
Business User
Project_abc
Network A & B
While defining the custom roles you will also give access to the objects listed in the Project and Networks. Permissions to the IT User’s entities such as Template, Objects created in Developer Studio, Process Flows, Mapping, etc. are managed through projects.
Object Type
Project
Accounts, Templates, Process Flows, Mappings
Project_123
Web Forms, Layouts (Schema), Various Events (created in Developer Studio)
Project_123
Permissions to the Partner Objects such as Transaction and Partners are managed through Networks. You can control access to networks thru complete Network access or Network list (view-only access to these networks).