Specifically: - [ ] clarifying the meaning of the "read" permission - [ ] explaining that "admin" role is permanent