pub fn user_role() -> RolePermissions
Create the built-in user role, which grants no admin permissions.