Role admin

I *think* this is ready to merge, although it might need a bit of UI/UX polish - all feedback gratefully received.
It feels a bit weird using this one model for the many actions, but having to declare that parts of the model isn't valid. It might be better to have multiple models.