Thanks @root for the detailed request! https://mattermost.uservoice.com/forums/306457-general/suggestions/17424298-access-control-list-for-web-interface-mobile-app
If you use Active Directory or SAML, those are also options that let's you control which users have access to the Mattermost server, and are part of our advanced authentication features.