A2: Navigate to the settings area, then user management, then roles, then overview, then click create new, enter the name and if you wish to give it to everyone or not. To edit this role further select it from the left side and add permissions as needed.
For more information, check the Documentation