I have a time management system and I need 3 levels of authority (e.g., User, Supervisor and Admin).

When a User logs in they can only see their tasks in the appliaction and update their tasks and they can't say run reports in this application.

When an Admin signs in they can see all the tasks of all users in the application and they can run any report they want.

How can I create these different levels of user and allow them to see different sections of this application.

Thanks