Roles

Admin — create custom roles and edit each role's scope and permission set.