This proposal outlines a comprehensive enhancement to IcePanel's current role-based access control system to address limitations in permission granularity, role assignment, and administrative flexibility.