[Delivers #41570795] Add support for the "Basic Data Entry" group

What it says on the tin...

Since this new role doesn't get access to events (but can still create/update the other archival record types) I've split events permissions into their own setting and assigned it to everyone that already had permission for events.