roles-permissions

Roles are defined in roles.yml and compiled into services.