Roles & permissions

From full access to read-only: clearly graded roles, and who may hand them out in the team.