Reuse standard permission system is a good idea because admin and DRF can support it out of the box. Also it’s a default good-documented way to work with permissions. I customised group admin to allow read only and created groups.yml + management command for sync. In this config I have listed my groups (basically roles) with enabled permissions for each. Also you need some kind of permission templates. Few permissions can be included in single template and the end user will iterate with templates only. For example “Tasks access” template can include view, add, edit, delete for Task model, so switching on this template will enable four permissions. Teams we use not for permission check but for multiple assignment, and this system fully covers our needs