The whole permission surface on one screen. Modules run down the left; each module opens into sub-permissions grouped under access, modify and configure, with scope attached right where a permission lives. An admin composes a role and audits it in the same view.