add roles and policies for staff account so that we can invite the social media manager to backoffice for writing blog articles without giving access to booking details #lilhoppers