As illustrated in the following diagram, the new build system contains a hierarchical role-based access-control model:

Let's look at each of the roles and the accesses they offer:
- All queues:
- Agent Queue Administrators: Users in this role have the ability to manage all queues within the project collection.
- Agent Queue Creators: Users in this role have the ability to create new queues. If there is no pool with the same name as the queue, one will be provisioned at queue-creation-time and the caller will be added as an administrator of both the queue and the corresponding pool. If a pool with the same name already exists, ...