Users, roles and permissions

TODO

Explain built-in users vs. an external identity provider, roles, and permissions per field, language and channel.