diff --git a/pkg/coredata/people_order_field.go b/pkg/coredata/people_order_field.go
index 842f37084..286927d45 100644
--- a/pkg/coredata/people_order_field.go
+++ b/pkg/coredata/people_order_field.go
@@ -21,6 +21,7 @@ type (
 const (
 	PeopleOrderFieldCreatedAt PeopleOrderField = "CREATED_AT"
 	PeopleOrderFieldFullName  PeopleOrderField = "FULL_NAME"
+	PeopleOrderFieldRole      PeopleOrderField = "ROLE"
 )
 
 func (p PeopleOrderField) Column() string {
diff --git a/pkg/server/api/api.go b/pkg/server/api/api.go
index 63e83ce5b..91b435ef7 100644
--- a/pkg/server/api/api.go
+++ b/pkg/server/api/api.go
@@ -106,7 +106,9 @@ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	w.Header().Set("X-Content-Type-Options", "nosniff")
 	w.Header().Set("Referrer-Policy", "no-referrer")
 	w.Header().Set("Content-Security-Policy", "default-src 'self'")
+	w.Header().Set("Permissions-Policy", "microphone=(), camera=(), geolocation=()")
 
+	// Default API security headers
 	router := chi.NewRouter()
 	router.MethodNotAllowed(methodNotAllowed)
 	router.NotFound(notFound)
diff --git a/pkg/server/api/console/v1/schema.graphql b/pkg/server/api/console/v1/schema.graphql
index 69db514f1..23c206087 100644
--- a/pkg/server/api/console/v1/schema.graphql
+++ b/pkg/server/api/console/v1/schema.graphql
@@ -146,6 +146,10 @@ enum PeopleOrderField
     @goEnum(
       value: "github.com/getprobo/probo/pkg/coredata.PeopleOrderFieldCreatedAt"
     )
+  ROLE
+    @goEnum(
+      value: "github.com/getprobo/probo/pkg/coredata.PeopleOrderFieldRole"
+    )
 }
 
 enum VendorOrderField
diff --git a/pkg/server/api/console/v1/schema/schema.go b/pkg/server/api/console/v1/schema/schema.go
index cbec66d0e..6356afd58 100644
--- a/pkg/server/api/console/v1/schema/schema.go
+++ b/pkg/server/api/console/v1/schema/schema.go
@@ -4975,6 +4975,10 @@ enum PeopleOrderField
     @goEnum(
       value: "github.com/getprobo/probo/pkg/coredata.PeopleOrderFieldCreatedAt"
     )
+  ROLE
+    @goEnum(
+      value: "github.com/getprobo/probo/pkg/coredata.PeopleOrderFieldRole"
+    )
 }
 
 enum VendorOrderField
@@ -52250,10 +52254,12 @@ var (
 	unmarshalNPeopleOrderField2githubᚗcomᚋgetproboᚋproboᚋpkgᚋcoredataᚐPeopleOrderField = map[string]coredata.PeopleOrderField{
 		"FULL_NAME":  coredata.PeopleOrderFieldFullName,
 		"CREATED_AT": coredata.PeopleOrderFieldCreatedAt,
+		"ROLE":       coredata.PeopleOrderFieldRole,
 	}
 	marshalNPeopleOrderField2githubᚗcomᚋgetproboᚋproboᚋpkgᚋcoredataᚐPeopleOrderField = map[coredata.PeopleOrderField]string{
 		coredata.PeopleOrderFieldFullName:  "FULL_NAME",
 		coredata.PeopleOrderFieldCreatedAt: "CREATED_AT",
+		coredata.PeopleOrderFieldRole:      "ROLE",
 	}
 )