Admins should have whatever perms they need to complete their tasks. If they do backend config work, then you’d have to trust them with files access. Best not to op them and just give them whatever perms they need. Mods should have ban, mute, kick, jail, vanish, etc. Devs should need whatever perms they need to set up their plugins. Helpers/jr mods should probably have kick and mute. Builders, up to you man. It’s your business model.