Add Role-based Access

Allow for ability to assign roles to agents at the department level.

Pending items:
  * [x] YAML file for new installs
  * [x] Migration patch