Creating a custom RBAC role for end users