I'd like to see Orion allow users to set up permission groups. Instead of setting permissions on an individual user or AD/SAML group, I'd like to be able to set up access levels in Orion (i.e. admins, operators, help desk, read-only). This would be especially useful now that Orion supports SAML authentication. It is much easier to create permission groups in Orion and then assign SAML users to those groups rather than pass group attributes over the SAML requests.
