Can I use Environments to constrain resources available to my teams? How about separation between Dev / Test / Production? How would I do that?

Yes, environments are a great way of isolating infrastructure in support of specific lifecycle stages. Like all other objects within Control Hub, access to resources is constrained by Access Controls - platform administrators (who typically set up Environments) can share resources (Environments, Deployments, etc.) with the relevant teams in the organisation. We recommend that resources are shared with Groups of users, rather than individual users, thus reducing maintenance effort in managing permissions and access rights.