Hi team, We're standing up our project and need three distinct staff roles: Front Desk, Medical Assistant, and Billing — each with a different level of access to patient, clinical, and financial data. Rather than guess at the design, I wanted to ask: - What's the approach you'd recommend for this in Medplum? - Is this a pattern other customers have already implemented? If there are reference policies or a sample project we could look at, that would save us a lot of time. - Anything you'd flag as a common mistake people make the first time they set roles up?