Surely we're going to need these for v1? Since they potentially have implications at all levels of the system (front-end and back-end), we should really get onto this ASAP.
(We will also need to go through this process for the other apps, but it may make sense to do one of them first, and learn the lessons of the issues that crop up during the process; then do the other apps in the light of those lessons.)
In a reversal of the usual procedure, am initially assigning this to Cate Boerema, because she gave us the instructions for what was needed in the Users permissions. Cate, I'm sure you will know who to reassign to if it's not you.