What admin roles and permissions exist across a network?

HQ, region, location, rep, buyer. Each sees its own slice, nothing above it.

Granular roles per tier. A region manager sees its locations. A rep sees its stores and quotes. A location admin sees its book. HQ sees sales and fees, not a location's customer list unless the agreement says so. Written into the system, not into a policy document nobody reads. When the five tiers aren't enough, narrow a role: a bookkeeper who sees statements and nothing else, a coach who approves a roster's orders and never sees a price. Change a role in one place and it applies everywhere the moment you save.

The feature is called Roles and permissions. It runs on the same rails as everything else here: one catalog, one price list, one cockpit, your name on the front.