using roles and predefined permissions per role for raising/lowering hand