Permissions

Global roles, website-level permissions, and future policy controls will be managed here.