In a corporate environment, a company implements a role-based access control (RBAC) system to manage user permissions effectively. The organization has three roles: Administrator, Manager, and Employee. Each role has specific permissions associated with it. The Administrator role can create, read, update, and delete resources, while the Manager role can read and update resources but cannot delete them. The Employee role can only read resources. If a new employee is hired and assigned the Manager role, what would be the implications for resource management and security within the organization, considering the principle of least privilege and potential risks associated with role escalation?