EMPLOYEE ROLE SCREEN:

Screen to manage employee access. Roles are created with certain privileges, these roles are then assigned to employees.
Employees can only have one role.
In future "Hybrid Role" functionality may be given which is an amalgamation of a number of other roles and automatically kept in synch, but for simplicity, employees will only ever have a single role.