Define roles (Admin, HR, Employee, Vendor)

[shamsudheens]

Define a clear role‑based access control (RBAC) model by identifying system roles and mapping explicit permissions to each role.
This ensures that users can access only the features and data relevant to their responsibilities, enforcing security and separation of concerns across the application.