Decide and document what Roles and Capabilities we'll need for what user groups. We may explore different sort of interaction levels (e.g. 1 - anonymous user; 2 - cookies-based suggestions and personalised content; 3 - Logged User with dashboard)

There's a front end AND backend component here. Backend should cross compare with the Wordpress Codex and see what's standard, what we'll need to build in etc.

https://codex.wordpress.org/Roles_and_Capabilities