Need to enforce role {up/down}grades based on current role and target role: - Need to control who can grant/revoke which roles - Hierarchy: owner > administrator > editor > viewer - Higher roles should manage lower roles