Admins can create and configure roles that grant specific permissions, which govern what users and groups with that role can do.