By giving (GRANT/DENY or adding them to roles) the appropriate permissions to people?
For example, you can add people to the DDL_ADMIN role if you want them to execute DDL.
If you add people for example only to the db_reader role, they can read data but they cannot change it or execute DDL statements.