In app/models/user.py in development, we have this:

We need to investigate and make sure that we are not giving permissions that should not be given, double-check if we actually need isCeltsStudentStaff to be included as admin instead of isProgramManagerFor for instance, because if anything program managers should have more access than simple student staff. And we should make sure that if we need to remove isCeltsStudentStaff it will not create any issues.