Toggle role permissions, inspect users' effective permissions, manage user direct overrides, and create new roles. Saving auto-creates missing permissions.