role: Add a `permissions` field to manage pems locally
role: Assign clear role for primary department
role: Forbid removing agent primary role
Merge pull request #1539 from greezybacon/feature/role-permission-field

Slight rework of Role feature