Jake and Michael discuss some different approaches to role-based permissions, and how to tackle assignment, management, and authorisation of them.