An important aspect of KIM is that you do not assign permissions directly to staff. Instead, permissions and responsibilities are assigned to roles. People, or groups of people, are attached to the role. A document describing OLE's Use of KIM- draft.
Roles and Permissions required by OLE are defined in the technical documentation at OLE Roles and Permissions - draft.