Fine-grained permissions

Assign permissions based on predefined and custom roles