Add roles system

Signed-off-by: Ben Agricola <bagricola@squiz.co.uk>