We should autogenerate our roles documentation - specifically the table here - in the same way we autogenerate the audit log documentation so our API is a the single source of truth for our built-in roles. Doing this will also help clarify the permissions for each role to users.

We should use the table design finalized in this ticket.

Rough sketch of an organization-scoped table (will need site-scoped counterpart)