Each User has one or more roles, and each role's capabilities are defined in Global permissions (except for the Administrator role, which has all permissions). Learn more about roles.