Users should be able to assign roles with different access levels and permissions.