Review and consolidate RBAC infrastructure-wide

We currently have RBAC in different places, we should review the current configurations and move towards a single source of truth for users and their roles.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information