We have a plugin for batch permission modification: https://github.com/bywatersolutions/koha-plugin-batch-permissions-modifier I think it would be beneficial to move this into core as a way to do a mix of role-based access control and per-user permissions. How the plugin works 1. Set permissions of a template user 2. Create a patron list of all the users who should have those permissions 3. In the plugin, assign the template user to the list 4. User's permissions are now controlled by the template user. Permissions can only be changed on the template user. Users who aren't assigned to a role list can have their permissions edited as it currently works. Currently only one role is allowed at a time.