Create different roles such as users who are read-only, temp-admin (used to briefly create integration connections, etc.), global admin-level who would control everything, etc.