[Spec Memo] Roles & Permissions

RBAC Tech Spec