Manage user accounts. Each user has a role + default property. Permissions resolve via role → permission codes.