Created an administrator role for each of two hums instances (one in lang02, one in hums), then created a published role for each of those. Created a "connection key" file for each of those four (file that launches the app, connects to the site, specifies what that user is allowed to to do, and asks for authentication).
Able to prevent user from creating new page or applying any kind of styling other than those elements and classes appearing in the dropdown list derived from the css file.
No improvement on the problems of not knowing what element the cursor is currently in and no way of modifying attributes that aren't visible (e.g. id's of instances or comments)