Permissions protect sensitive store information and operational controls.

Yes, through the Apps and sales channels settings page.

Yes, store settings and account settings are separate.

The primary domain is the main customer-facing domain of the store.