highlight using granular permissions such as 'view-secrets' vs traditional roles such as 'admin'