What each role reaches

manage is every action on that resource, including ones that do not exist yet. A role that is built in comes from the platform’s own list and is re-created at the next start if it goes missing — it can be narrowed to nothing and cannot be deleted. The row that decides most is whose work is visible: it is the only thing that makes somebody a driver rather than office staff, and there is no other setting for it anywhere.