Add fine-grained role/permission controls and pass-through credentials so Studio sessions honor per-user permissions.

Additionally, when mounting data specify each mount point as either or