Roles
Roles and the agent.* permissions they grant.
List roles
List roles
Create role
Permissions in the format `*`, `agent.*`, `agent.<resource>.*` or `agent.<resource>.<action>`. On a person's token, none can go beyond the role of whoever creates it.