Fine-grained roles, permissions and access controls

A new permissions model for Agility: give each role exactly the rights it needs on specific sitemaps, pages, lists and languages, keep publishing and unpublishing as separate rights, make teams work exactly like direct access, scope access tokens, and let your own admins set sign-in and token policies for your organization.