Rebuilding RBAC on GCP notation

I hire a web designer who edits the website. Do they now have my customer list? Four places each claimed to answer that, they disagreed, and the test suite reported everything was fine. Standardising 179 permissions on Google's notation is what made the tests possible. The drift that let four vocabularies accumulate is the part still unsolved.