Superadmins see and edit everything. Everyone else gets exactly the access set here. Changes save as you make them and apply the next time that person syncs.

Add the exact Google email they will sign in with. They get an email from notifications@driftlss.com with the link, and the access is ready the moment they sign in at calendar.driftlss.com. Nobody else can get in by signing in.