Permissions
Fine-grained control over what each person can do.
DiscoverManagement area
Roles bundle permissions: you assign them to people instead of deciding item by item.
Predefined and custom roles
Protected roles for the accountant and the technical manager
Nobody can grant more than they hold