Customizable permissions setup for roles by enterprise users

What is the challenge or problem or you are trying to solve?

new hires are not getting the proper permissions or are getting permissions they shouldnt have.

What is the impact?

liability with staff having ability to message res/fam, send announcements.

Describe your idea

let enterprise users fill out a permissions mask with check offs for each role that is implemented for each new hire when they are added to system with role. Currently, it is generalized across the board for all companies.