I would like to start using IManager. How do I set ups separate rights for certain Helpdesk staff and other admins. I have heard of the role based services that I can set up but was told to be careful because you can mess up admin rights. Also can I want to run Imanager from a server for the admins. Does it need to have a read write replica of root?