Rol User

I think there should be an easy way to enable or disable user access to Flow—something like a role with the necessary permissions to use it—while leaving all other administrative tasks as they are now for the system administrator.

The scenario is that I can't imagine unauthorized users burning tokens without permission.

The issue names no files, tests, or entry points. Clarify whether the requested role should only enable Flow access and how token use must be controlled, then map those requirements to the repository's existing permission model. Done means authorized users can use Flow while other administrative capabilities remain unchanged.

Written by the indexing model from the issue text.