Its based off of roles, not permissions set in the cfg