Role admin

I *think* this is ready to merge, although it might need a bit of UI/UX polish - all feedback gratefully received.