worksite realms

user types define what kind general rights a user has like grant admin(question): site.add perm's* user.<type>.<perm> (question)

auth role of user.template that controls the account's rights

*take a look at melete install docs for places where specific tool requirements are propogated ( partially manual for now)