Restricting user management based on roles

Hi, I have the classic User and Role models setup with a role_user pivot table where users belong to many roles.

I'd like to allow a particular role to be able to manage other users of another particular role.

So, say I have 3 roles total: Admin, Teacher, and Student. I'd like for:

• Teachers to be able to view and create Student users but not Admins.
• Students can't view or create any user.
• Admins can view and create users of any role.

Also, I'm trying to get this working within Nova using just policies but I think the proper setup wouldn't matter whether I'm using Nova or not. Thank you for any suggestions or guidance.