Hierarchical roles landed a while ago, however, there is no documentation on how to describe hierarchies or specify subroles. This is particularly important since hierarchical roles are not straightforward, i.e.:
- role gives permissions to role but not its sub-roles.
- role/% gives permissions to all subroles of role but not role itself.
- role/subrole gives permission to the subrole subrole
- * is not a wildcard character as many users expect.