Right now, the SaaS Configurator only exposes a limited Features tab, which doesn’t map to the full, granular permissions available under Settings → My Staff → Roles & Permissions.
It would be extremely helpful to be able to define default roles and permission sets in SaaS mode so new accounts are created with the correct access automatically, without manual post-setup steps.