Roles

System roles (admin/manager/user) plus custom roles you’ve defined. Each role has a permission matrix — open a role to edit its grants. Roles can include wildcards (e.g. productions.*).