Should have different access level for different roles. E.g. Even within HR we should only allow the superuser to access restricted info (e.g. salary within HR); however, we don't have this function at this point.