Role-scoped access for admins, moderators, and runners. This view keeps operators inside the tools they need without handing out the full host surface to everyone.