What each role may do, as one matrix: permissions grouped by area down the side, roles across the top with their head counts, a check per cell; a group's box sets the whole area. Edits gather in a draft whose changed cells are marked and counted in a save bar, risky grants are flagged, and custom roles can be created from an existing one or deleted with their people moved. In a narrow room it shows one role at a time. (Beamline complete system)