Adding new role.all_sites column

- Used to determine whether a role should be restricted to a single site or not
- Many old references to "tier" have been replaced