It can be intresting to remove access to certain screens to all users or to defined roles (e.g. restrict access to "budget" screen which may contains confidential information).
You need to be « Administrator » of the environment to define who is able to access the different screens.
Screens' access is defined by profil.
You can define screen access from the menu "Project".
Click on the name of the environment.
Then select "Screens" in the popup
You can then specify who will be able to see what screens
Be aware that roles "Administrator" and "Portfolio Manager" access can be added to other roles' access. For instance,you can view "buget" screen as "Administartor" and can't see it as "viewer" of a projet, that means you will be able to see it anyway because you are administrator of the environment.