Roles

Create roles, grant permissions, and control record visibility.