Only staff whose role includes the Configuration permission (listed under the Business Settings permission group in Users Roles) can open the page; anyone else is sent back to the admin dashboard. Users going through the guided onboarding flow can also reach it. There is no separate per-tab permission: if you can open Configuration you can edit every Order tab your account has.