is the staff user's permissions "global" or attached to something else (like, say, an organization)?