Role management

Users can be assigned multiple roles, and each role can have multiple permissions that control what actions the user can perform.

Manage roles at Admin > Group rights.