By default, there are two built-in groups:
User is essentially a read-only account.
Admin gives full read and write access to all portions of the web application.
Custom roles may be created with granular control.
Find the Create New Role button under the Administration → Roles section of the web application.
After clicking on the Create Role button, enter the Role Name, and select the Group to apply that Group to.
After creating the role, users may be added to the role by clicking on the toggle button for the column that user and custom role.