**TELLER:** SELECT, INSERT, UPDATE on accounts and transactions (restricted to own branch via RCAC). No access to loans or audit_log. - **BRANCH_MANAGER:** SELECT, INSERT, UPDATE on accounts, transactions, and loans (restricted to own branch via RCAC). SELECT on summary views for all branches. No DE