New roles & permissions system focussing on attaching permissions to policies rather than Roles, after which you can assign one or more policies per role, and one or more policies per user.