Roles

A role decides which parts of the system a person can open, and which works and attendance sub-records they can enter data for.