Adding staff as users on a position, assigning role and permissions — deciding who may see and change what.