Currently just using Synology photos but with an eye on immich, as others have mentioned and plan to switch now that it has facial and object recognition. At this point it can do everything I want and has the benefit of being open source.
You have a Synology and Synology photos will do the features you mentioned (multiple users, different permissions). While I wouldn't recommend it now over Immich I'm curious why you went with photoprism initially?