This is a talk I gave at 2016 Vancouver WordCamp.  It is an attempt to document how we use Custom Post Types on our site to segment the site into a group of control domains where an associated role has virtually complete control over that domain without any additional access outside of that domain.